CVE-2026-15337

creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy...

CVE-2026-69252

creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0 2026-08-04 16:35:24+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wp74-f5hh-5f3r 2026-08-10...

GHSA-WP74-F5HH-5F3R

creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0...

Malicious code in @or-sdk/source (npm)

npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...

MAL-2026-11727 Malicious code in @or-sdk/source (npm)

npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...

CVE-2026-69251

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...

GHSA-CVXM-645Q-P574

creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...

GHSA-33VJ-92QQ-66HC

creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...

GHSA-XHF5-7WJV-PQXP

creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...

CVE-2026-14337

creationtimestamp| type| source ---|---|--- 2026-08-04 15:01:43+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msbbqwmtp22t...

CVE-2026-10709

creationtimestamp| type| source ---|---|--- 2026-08-04 14:42:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msbao5ww2k2v...

CVE-2026-66011

creationtimestamp| type| source ---|---|--- 2026-08-04 14:30:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7zzqhcc2s...

NPM: Flowise RCE via TypeORM DataSource

NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

Flowise RCE via TypeORM DataSource

============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...

NPM: Flowise RCE via TypeORM DataSource

NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

CVE-2026-63252

creationtimestamp| type| source ---|---|--- 2026-08-04 14:08:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ggd656zxllch5 2026-08-06 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msg4cdo23s2r...

CVE-2026-58080

creationtimestamp| type| source ---|---|--- 2026-08-04 14:00:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/da6t4qlq3pqql 2026-08-06 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msftw3zzfs22...

CVE-2026-12047

creationtimestamp| type| source ---|---|--- 2026-08-04 14:00:18+00:00| seen| https://t.me/cyberoknews/229 2026-08-05 00:00:35+00:00| seen| https://t.me/cyberoknews/229 2026-08-06 00:00:58+00:00| seen| https://t.me/cyberoknews/229...

CVE-2026-62927

creationtimestamp| type| source ---|---|--- 2026-08-04 13:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg 2026-08-06 12:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...