5htp-airtable (>=0.0.1 <=0.1.2-3), @a-cube-io/ereceipts-js-sdk (=1.1.0) +146 more potentially affected by CVE-2025-57282 via ngrok (=5.0.0-beta.2)

ngrok NPM version =5.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on ngrok and may be impacted: - 5htp-airtable =0.0.1, =1.0.0, =5.0.0, =1.0.0, =3.1.6, =1.4.4, =1.0.0, =1.3.2, =1.0.31, =1.0.0, =1.0.26, =1.0.2, =1.1.0 and more Source cves:...

CVE-2026-42559

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae...

GHSA-FVH2-GM75-J4J7

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae...

CVE-2026-41949

creationtimestamp| type| source ---|---|--- 2026-05-18 17:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5e4ahjr62h...

CVE-2026-7302

creationtimestamp| type| source ---|---|--- 2026-05-18 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2l2fzt2g...

CVE-2026-20685

creationtimestamp| type| source ---|---|--- 2026-05-18 16:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dbepiyd2h...

GHSA-C55G-RP4X-FX84

creationtimestamp| type| source ---|---|--- 2026-05-18 16:40:50+00:00| seen| https://gist.github.com/alon710/f7ea0e610f42bb6c81fff1ec9bb3b2bd...

CVE-2026-26462

creationtimestamp| type| source ---|---|--- 2026-05-18 16:37:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5cqqq5xl2k 2026-05-30 11:00:50+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vjwfts32z...

CVE-2026-40796

creationtimestamp| type| source ---|---|--- 2026-05-18 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm5cizjp7a2c...

GHSA-5R97-79VW-QVM4

creationtimestamp| type| source ---|---|--- 2026-05-18 16:10:50+00:00| seen| https://gist.github.com/alon710/437f2e5c2f0622a4f1f7e66c52bc342f...

CVE-2026-5163

creationtimestamp| type| source ---|---|--- 2026-05-18 14:44:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm54ha7ldl2i...

GHSA-79CF-XCQC-C78W

creationtimestamp| type| source ---|---|--- 2026-05-18 14:40:50+00:00| seen| https://gist.github.com/alon710/6c307c7259353f2c5a97793055cbda6e...

GHSA-97R8-RF7Q-WMJW

creationtimestamp| type| source ---|---|--- 2026-05-18 14:10:50+00:00| seen| https://gist.github.com/alon710/98fbc08fd28e864acb5a0c94e605d960...

EUVD-2026-30561

Microsoft APM: Symlinks under .apm/prompts/ and .apm/agents/ are dereferenced during apm install, copying host-local file contents into the project tree...

CVE-2026-0983

creationtimestamp| type| source ---|---|--- 2026-05-18 12:46:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vth5h7t2p 2026-05-19 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mm7claemwb2n...

CVE-2026-42651

creationtimestamp| type| source ---|---|--- 2026-05-18 12:34:28+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4v5mze4o24...

CVE-2026-8803

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login. This manipulation causes use of weak hash. Remote exploitation of the attack is possible. The attack is considered to...

CVE-2026-8751

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mm4s4budgk23...

CVE-2026-42659

creationtimestamp| type| source ---|---|--- 2026-05-18 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4rqkm3rc2h...

CVE-2026-8803 opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash

A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login. This manipulation causes use of weak hash. Remote exploitation of the attack is possible. The attack is considered to...