CVE-2026-11463

A security flaw has been identified in the USCiLab Cereal library that could affect the security and stability of applications utilizing it. Mitigation Since the vulnerability is triggered by processing malicious payloads, immediately restrict network access or input mechanisms that allow...

CVE-2026-47633

creationtimestamp| type| source ---|---|--- 2026-06-19 06:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775245576207551 2026-06-19 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momo3nowoe2c...

GHSA-8MG9-J9CF-54CJ

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-53852

creationtimestamp| type| source ---|---|--- 2026-06-19 04:41:13+00:00| seen| https://gist.github.com/alon710/e083ed26c473e5302badc99cce623436 2026-06-19 05:02:08+00:00| seen| https://gist.github.com/alon710/21958fb84fc5c64da7368e4899e2b6cf...

CVE-2026-32174

creationtimestamp| type| source ---|---|--- 2026-06-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momj2bqrjp26 2026-06-19 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774890711719017...

CVE-2026-12044

creationtimestamp| type| source ---|---|--- 2026-06-19 03:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momgy6vhd72r 2026-06-19 05:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkr5ol5y2u 2026-08-02 08:00:28+00:00| seen|...

CVE-2026-49454

creationtimestamp| type| source ---|---|--- 2026-06-19 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774182978943000 2026-06-19 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mom6ygyknu2x...

PT-2026-51062

Name of the Vulnerable Software and Affected Versions Stanza version 1.12.0 Description An issue exists where the software attempts to load PyTorch checkpoint files using a safe method but automatically falls back to an unsafe deserialization process when a pickle.UnpicklingError occurs. Because...

CVE-2026-47846

creationtimestamp| type| source ---|---|--- 2026-06-18 20:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116772884543424032 2026-06-18 20:00:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molmjyhows26 2026-06-18 21:23:42+00:00| seen|...

GHSA-2JQ4-Q6VV-4CP3

creationtimestamp| type| source ---|---|--- 2026-06-18 19:11:23+00:00| seen| https://gist.github.com/alon710/2a767af5c208a82e89707e10b62dcf61 2026-06-18 19:21:43+00:00| seen| https://gist.github.com/alon710/2aa5fa13eea204ffabb0321701e9195f...

GHSA-R253-R9JW-QG44

creationtimestamp| type| source ---|---|--- 2026-06-18 18:41:53+00:00| seen| https://gist.github.com/alon710/41babc051db96b1507f3fb804d7012be 2026-06-18 18:51:38+00:00| seen| https://gist.github.com/alon710/3807d480d537cf9538209dc130bd58ae 2026-06-18 19:02:49+00:00| seen|...

CVE-2026-54390

creationtimestamp| type| source ---|---|--- 2026-06-18 18:30:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molhj2cqpl2v 2026-06-18 18:30:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116772530635095713 2026-06-18 21:33:43+00:00| seen|...

CVE-2026-9692

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy...

CVE-2026-9692

Summary (CVE-2026-9692): Mojolicious::Sessions::Storable in Perl versions up to 0.05 generates insecure session IDs. The default generator seeds a SHA-1 hash with a mix of low-entropy sources: built-in rand, epoch time, heap address of an anonymous hash, and the process ID, making IDs predictable...

CVE-2026-55203

creationtimestamp| type| source ---|---|--- 2026-06-18 17:28:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mole2kzk6d2c 2026-06-18 19:42:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116772813087719313 2026-06-19 08:55:36+00:00| seen|...

GHSA-47QP-HQVX-6R3F

creationtimestamp| type| source ---|---|--- 2026-06-18 13:41:25+00:00| seen| https://gist.github.com/alon710/adfa7aacc3b80320d7d38d47591141d2 2026-06-18 14:01:20+00:00| seen| https://gist.github.com/alon710/1009ff77420ca2d3dfc49ca0eb601808...

CVE-2026-11717

creationtimestamp| type| source ---|---|--- 2026-06-18 13:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokw33ts7e2e 2026-06-18 15:30:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mol5hf2ood27 2026-06-18 15:30:29+00:00| seen|...

CVE-2026-11718

creationtimestamp| type| source ---|---|--- 2026-06-18 13:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokvs5esly2y 2026-06-18 14:00:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokygbvzep2c 2026-06-18 14:00:30+00:00| seen|...

OpenClaw: Host environment sanitizer missed two Node.js control variables

Summary Host environment sanitizer missed two Node.js control variables. In affected versions, a lower-trust env source such as a workspace .env, tool env override, or skill env block could pass Node.js control variables through the shared sanitizer. This advisory is scoped to the named feature a...

CVE-2026-11717

An authentication bypass vulnerability exists in the generic opaque token validation path validateOpaqueToken of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint RFC 7662, the toolbox decodes the response into an introspectResp struct where t...