GHSA-MWV6-3258-Q52C

creationtimestamp| type| source ---|---|--- 2026-06-10 16:20:08+00:00| seen| https://gist.github.com/jmcveen/2d2b8e075a88abf882695479e38437d1...

CVE-2026-11603

creationtimestamp| type| source ---|---|--- 2026-06-10 16:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnx4c47w5x22...

CVE-2026-53471

creationtimestamp| type| source ---|---|--- 2026-06-10 16:05:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx3omauls2q 2026-06-18 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mokn2xwxmc2k...

Turn specs into evals for any agent with ASSERT

Today, we’re releasing Adaptive Spec-driven Scoring for Evaluation and Regression Testing ASSERT, an open-source framework for turning natural-language behavior specifications into executable evaluations. Every team building an AI system starts with a clear intention for the behaviors they want t...

CVE-2026-49498

creationtimestamp| type| source ---|---|--- 2026-06-10 15:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2kwtz462f 2026-06-11 22:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2aefrrlq2i...

EUVD-2026-36066

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1...

CVE-2026-52756

creationtimestamp| type| source ---|---|--- 2026-06-10 15:40:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2by7mii2j...

CVE-2026-52751

creationtimestamp| type| source ---|---|--- 2026-06-10 15:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzh4kpsh2r 2026-06-11 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo24z3qhlg2i...

CVE-2026-52758

creationtimestamp| type| source ---|---|--- 2026-06-10 15:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwz7deg5b2q 2026-06-11 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnziveizyk22...

CVE-2026-53471

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CVE-2026-53439

creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...

CVE-2026-52752

creationtimestamp| type| source ---|---|--- 2026-06-10 15:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy7pl2zb2m...

CVE-2026-52759

creationtimestamp| type| source ---|---|--- 2026-06-10 15:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy3uedfc2f...

CVE-2026-47350

Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.31 and 14.0.0-14.3.3...

CVE-2026-53438

creationtimestamp| type| source ---|---|--- 2026-06-10 14:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwxybdq6t2p 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...

CVE-2026-8677

creationtimestamp| type| source ---|---|--- 2026-06-10 14:16:19+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwvllvnkm2o...

CVE-2026-53470 Migration-planner: getsourcedownloadurl missing organization check

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

EUVD-2026-36034

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

EUVD-2026-36031

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...