CVE-2026-53667 React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2026-53667

CVE-2026-53667 affects React Router (versions 7.11.0–7.17.0) where the RSCErrorHandler failed to validate protocol, enabling possible cross-site scripting via redirects from untrusted sources when using the unstable RSC APIs. The issue stems from missing protocol validation in the RSCErrorHandler...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

GO-2026-6078 Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) in gitea.dev

Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens incomplete fix of 38009 in gitea.dev...

CVE-2026-59690

creationtimestamp| type| source ---|---|--- 2026-07-27 15:06:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrn6clq6mb2l 2026-07-27 15:06:31+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116992559643254224 2026-07-28 20:15:12+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk-portable: java-25-openjdk-portable-25.0.4.0.7-2.0.2.hum1 aarch64, x8664 java-25-openjdk-portable-devel-25.0.4.0.7-2.0.2.hum1 aarch64, x8664...

CERTFR-2026-ACT-032

creationtimestamp| type| source ---|---|--- 2026-07-27 12:44:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mrmwf2trmd27 2026-07-27 12:44:48+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116992001998966808 2026-07-27 13:36:16+00:00| seen|...

CVE-2026-48357

creationtimestamp| type| source ---|---|--- 2026-07-27 09:11:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkhglsrg2u 2026-07-27 09:11:40+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmki4xeux23...

CVE-2026-48353

creationtimestamp| type| source ---|---|--- 2026-07-27 08:45:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmizvg3wy2h 2026-07-27 08:45:51+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmizxp2vn2y...

CVE-2026-48367

creationtimestamp| type| source ---|---|--- 2026-07-27 03:49:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyhhwilc2o 2026-07-27 03:49:21+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlyhrnjtl2c 2026-07-27 03:49:38+00:00| seen|...

CVE-2026-48369

creationtimestamp| type| source ---|---|--- 2026-07-27 03:27:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlxai5myw2u 2026-07-27 03:27:24+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlxajqsw32s 2026-07-27 03:42:37+00:00| seen|...

CVE-2026-61520

creationtimestamp| type| source ---|---|--- 2026-07-27 03:11:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlweengnh2r 2026-07-27 03:11:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlweem42i2m...

CVE-2020-15136

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen| https://gist.github.com/tu-trinh-scale/2134fa4233992263562231dfecbd2046 2026-07-27 00:52:06+00:00| seen|...

CVE-2023-32732

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/a9e8b1d357515416fcb2f81261c1c92e 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen|...

CVE-2020-15115

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen| https://gist.github.com/tu-trinh-scale/2134fa4233992263562231dfecbd2046 2026-07-27 00:52:06+00:00| seen|...

PT-2026-65375

Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens incomplete fix of 38009 in gitea.dev...

CVE-2026-57989

creationtimestamp| type| source ---|---|--- 2026-07-26 19:23:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrl473fzck2v 2026-07-26 20:32:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla2pxgvp2d 2026-07-27 04:45:16+00:00| seen|...

CVE-2026-17497

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtqq7or2l 2026-07-26 16:11:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrimr3t32u 2026-07-26 18:07:21+00:00| seen|...

CVE-2026-17496

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtkdipa23 2026-07-26 16:10:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrg43gaz2y 2026-07-26 17:00:19+00:00| seen|...