CVE-2026-32174

creationtimestamp| type| source ---|---|--- 2026-06-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momj2bqrjp26 2026-06-19 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774890711719017...

CVE-2026-12044

creationtimestamp| type| source ---|---|--- 2026-06-19 03:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momgy6vhd72r 2026-06-19 05:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkr5ol5y2u 2026-08-02 08:00:28+00:00| seen|...

CVE-2026-49454

creationtimestamp| type| source ---|---|--- 2026-06-19 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774182978943000 2026-06-19 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mom6ygyknu2x...

PT-2026-51062

Name of the Vulnerable Software and Affected Versions Stanza version 1.12.0 Description An issue exists where the software attempts to load PyTorch checkpoint files using a safe method but automatically falls back to an unsafe deserialization process when a pickle.UnpicklingError occurs. Because...

CVE-2026-47846

creationtimestamp| type| source ---|---|--- 2026-06-18 20:00:20+00:00| seen| https://infosec.exchange/users/offseq/statuses/116772884543424032 2026-06-18 20:00:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molmjyhows26 2026-06-18 21:23:42+00:00| seen|...

GHSA-2JQ4-Q6VV-4CP3

creationtimestamp| type| source ---|---|--- 2026-06-18 19:11:23+00:00| seen| https://gist.github.com/alon710/2a767af5c208a82e89707e10b62dcf61 2026-06-18 19:21:43+00:00| seen| https://gist.github.com/alon710/2aa5fa13eea204ffabb0321701e9195f...

GHSA-R253-R9JW-QG44

creationtimestamp| type| source ---|---|--- 2026-06-18 18:41:53+00:00| seen| https://gist.github.com/alon710/41babc051db96b1507f3fb804d7012be 2026-06-18 18:51:38+00:00| seen| https://gist.github.com/alon710/3807d480d537cf9538209dc130bd58ae 2026-06-18 19:02:49+00:00| seen|...

CVE-2026-54390

creationtimestamp| type| source ---|---|--- 2026-06-18 18:30:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molhj2cqpl2v 2026-06-18 18:30:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116772530635095713 2026-06-18 21:33:43+00:00| seen|...

CVE-2026-9692

Summary (CVE-2026-9692): Mojolicious::Sessions::Storable in Perl versions up to 0.05 generates insecure session IDs. The default generator seeds a SHA-1 hash with a mix of low-entropy sources: built-in rand, epoch time, heap address of an anonymous hash, and the process ID, making IDs predictable...

CVE-2026-9692

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy...

CVE-2026-55203

creationtimestamp| type| source ---|---|--- 2026-06-18 17:28:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mole2kzk6d2c 2026-06-18 19:42:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116772813087719313 2026-06-19 08:55:36+00:00| seen|...

GHSA-47QP-HQVX-6R3F

creationtimestamp| type| source ---|---|--- 2026-06-18 13:41:25+00:00| seen| https://gist.github.com/alon710/adfa7aacc3b80320d7d38d47591141d2 2026-06-18 14:01:20+00:00| seen| https://gist.github.com/alon710/1009ff77420ca2d3dfc49ca0eb601808...

CVE-2026-11717

creationtimestamp| type| source ---|---|--- 2026-06-18 13:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokw33ts7e2e 2026-06-18 15:30:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mol5hf2ood27 2026-06-18 15:30:29+00:00| seen|...

CVE-2026-11718

creationtimestamp| type| source ---|---|--- 2026-06-18 13:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokvs5esly2y 2026-06-18 14:00:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokygbvzep2c 2026-06-18 14:00:30+00:00| seen|...

OpenClaw: Host environment sanitizer missed two Node.js control variables

Summary Host environment sanitizer missed two Node.js control variables. In affected versions, a lower-trust env source such as a workspace .env, tool env override, or skill env block could pass Node.js control variables through the shared sanitizer. This advisory is scoped to the named feature a...

CVE-2026-11717

An authentication bypass vulnerability exists in the generic opaque token validation path validateOpaqueToken of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint RFC 7662, the toolbox decodes the response into an introspectResp struct where t...

CVE-2026-52866

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01 2026-06-18 20:07:56+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g...

CVE-2026-12530

creationtimestamp| type| source ---|---|--- 2026-06-17 22:00:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojcrnyd3x2t 2026-06-17 23:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojicjxaln2z...

Duplicate Advisory: picklescan missing detection by simple obfuscation of a `builtins.eval` call

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9m3x-qqw2-h32h. This link is maintained to preserve external references. Original Description picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute...

GHSA-J6C9-QVP8-699F Duplicate Advisory: picklescan missing detection by simple obfuscation of a `builtins.eval` call

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9m3x-qqw2-h32h. This link is maintained to preserve external references. Original Description picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute...