CVE-2026-14691

creationtimestamp| type| source ---|---|--- 2026-07-05 02:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116864897921651205 2026-07-05 02:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpui4szdd22o 2026-07-05 09:58:11+00:00| seen|...

CVE-2025-71373

creationtimestamp| type| source ---|---|--- 2026-07-04 05:28:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsdc2tpwf2x 2026-07-04 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ot6nx2f...

CVE-2025-71372

creationtimestamp| type| source ---|---|--- 2026-07-04 05:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsbwlkaf723 2026-07-04 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ib2b22u...

CVE-2025-71362 picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

EUVD-2025-210418

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

CVE-2025-71362

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

CVE-2026-58426

creationtimestamp| type| source ---|---|--- 2026-07-03 22:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprl4pas652r 2026-07-04 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116858764503193267 2026-07-04 00:01:05+00:00| seen|...

CVE-2026-27771

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771

CVE-2026-27771 affects Gitea container registry prior to 1.26.2. The root cause is ReqContainerAccess not enforcing per-owner visibility, allowing ghost users (UserID: -1) to access private container images via standard OCI/Docker endpoints. Impact: unauthenticated access can expose private/inter...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-14612

creationtimestamp| type| source ---|---|--- 2026-07-03 18:15:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5p36m2x2g 2026-07-03 18:38:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6wxqjhl25...

CVE-2026-56015

creationtimestamp| type| source ---|---|--- 2026-07-03 14:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqquiykdy2k 2026-07-03 14:57:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpqslp3c2k24 2026-07-04 04:13:10+00:00| seen|...

CVE-2026-13341

creationtimestamp| type| source ---|---|--- 2026-07-03 12:11:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpqjcqu2mf2r 2026-07-03 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116856286666318310 2026-07-03 13:30:31+00:00| seen|...

CVE-2026-14544

creationtimestamp| type| source ---|---|--- 2026-07-03 10:21:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqd6zl5f622 2026-07-03 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116855578805749180 2026-07-03 10:30:31+00:00| seen|...

CVE-2026-10140

creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...