CVE-2026-33530

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33530 2026-03-26 19:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfafsvbz2n 2026-03-26 21:01:09+00:00| seen|...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack when processing Git URL fragment subdir components. An attacker can access files outside the intended Git repository root by specifying a crafted subdir value in the URL fragment. Note: This is only exploitable if builds...

BuildKit Git URL subdir component can cause access to restricted files

Impact Insufficient validation of Git URL fragment subdir components :, docs may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. Patches The issue has been fixed in version v0.28.1 Workarounds The issue affects...

CVE-2026-33494

creationtimestamp| type| source ---|---|--- 2026-03-26 18:01:14+00:00| seen| https://infosec.exchange/users/offseq/statuses/116296782554333231 2026-03-26 18:01:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhy6pudmxi2j 2026-03-26 19:04:07+00:00| seen|...

CVE-2026-2931

creationtimestamp| type| source ---|---|--- 2026-03-26 05:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3lmmly27 2026-03-26 05:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwejqr3y25 2026-03-26 07:00:50+00:00| seen|...

CVE-2026-4840

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4840 2026-03-26 05:18:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3eol3e2t 2026-03-26 06:00:32+00:00| seen|...

CVE-2026-28760

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://jvn.jp/en/jp/JVN08057419/ 2026-03-26 07:19:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhx2uv3j7o2p 2026-03-26 09:00:30+00:00| seen|...

CVE-2026-33917

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfokbfmu2d 2026-03-26 01:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfpllrut2r 2026-03-28 12:00:16+00:00| seen|...

PT-2026-28526

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.28.1 Description Insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted...

CVE-2026-33661

creationtimestamp| type| source ---|---|--- 2026-03-25 19:30:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q938-ghwv-8gvc 2026-03-26 22:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn724yty2p 2026-03-26 23:06:19+00:00| seen|...

CVE-2026-4946

creationtimestamp| type| source ---|---|--- 2026-03-25 16:55:00+00:00| seen| http://takeonme.org/cves/cve-2026-4946/ 2026-03-29 20:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7xsulyfj2t 2026-03-29 21:00:31+00:00| seen|...

CVE-2025-15517

creationtimestamp| type| source ---|---|--- 2026-03-25 16:09:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhvhy2gdiot2 2026-03-25 16:40:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mhvjqeeaau2i 2026-03-26...

CVE-2026-34036

creationtimestamp| type| source ---|---|--- 2026-03-25 13:49:24+00:00| published-proof-of-concept| https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r 2026-03-31 23:00:10+00:00| published-proof-of-concept| Telegram/P0Q0ZCX8Ywjq9vjEgqv2AzrjbsHPHPXVA5rNa0Ss-R1H3I 2026-04-01...

Security update for grafana

This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...

CVE-2026-3608

creationtimestamp| type| source ---|---|--- 2026-03-25 09:52:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhuswle4j72z 2026-03-25 10:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhuteuaw7t2i 2026-03-25 10:30:32+00:00| seen|...

CVE-2026-2072

creationtimestamp| type| source ---|---|--- 2026-03-25 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116287932364387625 2026-03-25 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhuaxb5hob2i 2026-03-25 06:05:07+00:00| seen|...

PT-2026-28590

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A flaw exists in the Docker daemon’s privilege validation process during docker plugin install. The daemon does not fully enforce plugin privilege checks, potentially allowing unintended...

CVE-2026-33943

creationtimestamp| type| source ---|---|--- 2026-03-24 23:44:29+00:00| published-proof-of-concept| https://github.com/capricorn86/happy-dom/security/advisories/GHSA-6q6h-j7hj-3r64 2026-03-27 22:28:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3646ftmn2s 2026-03-27...

CVE-2025-33238

creationtimestamp| type| source ---|---|--- 2026-03-24 21:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtkywam442j 2026-03-24 22:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlajiyho2c 2026-03-31 08:00:14+00:00| seen|...

All AI and Security Teams Need Transparent Data Pipelines

Transparent AI data pipelines help organizations verify sources, reduce errors, meet regulations, and build trust by making outputs auditable and reliable...