GHSA-JR4P-4XJH-FWVW

creationtimestamp| type| source ---|---|--- 2026-07-15 19:31:25+00:00| seen| https://gist.github.com/alon710/0bc2e259381309bd98ca630012fce3cb...

CVE-2026-50552

creationtimestamp| type| source ---|---|--- 2026-07-15 19:31:25+00:00| seen| https://gist.github.com/alon710/0bc2e259381309bd98ca630012fce3cb 2026-07-15 20:35:05+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-jr4p-4xjh-fwvw...

CVE-2026-40501

creationtimestamp| type| source ---|---|--- 2026-07-15 19:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphhoez2b2u...

CVE-2026-50030

DataEase prior to 2.10.23 exposes the SQL preview path (DatasetDataApi.previewSql/previewSqlCheck) via /de2api/datasetData/previewSql, accepting PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross. The system stores decoded SQL in datasourceRequest.query and CalciteProvider.f...

CVE-2026-47996

creationtimestamp| type| source ---|---|--- 2026-07-15 19:18:57+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpgsxznzn2j...

CVE-2026-15895

OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-diff v1.131.0 or...

CVE-2026-20296

creationtimestamp| type| source ---|---|--- 2026-07-15 19:10:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgdzh2ib22 2026-07-16 02:11:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i 2026-07-16 06:26:56+00:00| seen|...

CVE-2026-12382

creationtimestamp| type| source ---|---|--- 2026-07-15 19:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpg52amuh22...

CVE-2026-15895 OS command injection in jsii-diff in AWS jsii

OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-diff v1.131.0 or...

GHSA-36QX-FR4F-26G5

creationtimestamp| type| source ---|---|--- 2026-07-15 19:00:46+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

CVE-2026-52881

creationtimestamp| type| source ---|---|--- 2026-07-15 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpey6zobs2c...

CVE-2026-52847

creationtimestamp| type| source ---|---|--- 2026-07-15 18:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpeunqxad2d...

CVE-2026-49273

creationtimestamp| type| source ---|---|--- 2026-07-15 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbmvayhb2l...

CVE-2026-61644

creationtimestamp| type| source ---|---|--- 2026-07-15 17:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpacpd3na2m...

GHSA-JHW3-9Q9R-GC5W

creationtimestamp| type| source ---|---|--- 2026-07-15 17:21:51+00:00| seen| https://gist.github.com/Mundi-Xu/99af1b08275fd437cfb79bfe481e68b7...

CVE-2026-54563

creationtimestamp| type| source ---|---|--- 2026-07-15 17:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22 2026-08-26 16:35:10+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp...

CVE-2026-47703

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-59762

creationtimestamp| type| source ---|---|--- 2026-07-15 17:12:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7qrlyih2n 2026-07-16 13:00:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t 2026-07-16 18:28:05+00:00| seen|...

CVE-2026-20150

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-15 19:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22 2026-07-16 13:00:29+00:00| seen|...

MAL-2026-10686 Malicious code in @ddh-libraries/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc06a6debd614f8f6fb60d5f2636daf90b4085010e264cd69422da4b793234f8 The OpenSSF Package Analysis project identified '@ddh-libraries/analytics' @ 99.0.0 npm as malicious. It is considered malicious because: - The...