CVE-2026-42530

creationtimestamp| type| source ---|---|--- 2026-06-17 17:58:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivbi45fe2b 2026-06-17 18:03:06+00:00| seen| https://bsky.app/profile/crustytldr.bsky.social/post/3moivjizel522 2026-06-17 21:00:00+00:00| seen|...

Creation of Temporary File in Directory with Insecure Permissions

Overview @earendil-works/pi-coding-agent is a Coding agent CLI with read, bash, edit, write tools and session management Affected versions of this package are vulnerable to Creation of Temporary File in Directory with Insecure Permissions in the process handling temporary extension package instal...

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can...

GHSA-JWM3-QCFW-C5PP

creationtimestamp| type| source ---|---|--- 2026-06-17 07:12:05+00:00| seen| https://gist.github.com/alon710/8b7e25353cc061230cbe51b2eb337874 2026-06-17 07:21:45+00:00| seen| https://gist.github.com/alon710/1e67864e99b4742c1095816dbc6f28c7...

CVE-2026-46861

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-17 11:55:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiayeen2k2g 2026-06-26 22:07:06+00:00| seen|...

CVE-2026-12453

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 06:22:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohofcnqd62t 2026-06-21 18:00:00+00:00| seen|...

GHSA-69QJ-PVH9-C5WG

creationtimestamp| type| source ---|---|--- 2026-06-16 22:41:17+00:00| seen| https://gist.github.com/alon710/2d3358848147c1728694a3629d631316 2026-06-16 23:01:53+00:00| seen| https://gist.github.com/alon710/67012fd2d01a0b46570236682933fc3c...

CVE-2026-53855

creationtimestamp| type| source ---|---|--- 2026-06-16 21:58:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogs77t3sa2f 2026-06-16 22:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogscln4xq2c...

GHSA-J6C9-X7QJ-28XF

creationtimestamp| type| source ---|---|--- 2026-06-16 21:24:00+00:00| seen| https://gist.github.com/konard/b5022a7dd742df01e2f9265d5908dcad 2026-06-16 21:33:02+00:00| seen| https://gist.github.com/konard/056d8d6804564c2fffaccf92c7483ba5...

GHSA-WWFH-H76J-FC44

creationtimestamp| type| source ---|---|--- 2026-06-16 21:24:00+00:00| seen| https://gist.github.com/konard/b5022a7dd742df01e2f9265d5908dcad 2026-06-16 21:33:02+00:00| seen| https://gist.github.com/konard/056d8d6804564c2fffaccf92c7483ba5...

GHSA-88FW-HQM2-52QC

creationtimestamp| type| source ---|---|--- 2026-06-16 21:24:00+00:00| seen| https://gist.github.com/konard/b5022a7dd742df01e2f9265d5908dcad 2026-06-16 21:33:02+00:00| seen| https://gist.github.com/konard/056d8d6804564c2fffaccf92c7483ba5 2026-06-17 10:01:05+00:00| seen|...

CVE-2026-53849

creationtimestamp| type| source ---|---|--- 2026-06-16 21:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoznygie2a 2026-06-16 21:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogqe2tzjc2x 2026-06-19 06:12:11+00:00| seen|...

CVE-2026-22312

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoyat2ju2a 2026-06-16 21:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogreeehlr2g...

CVE-2026-35267

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 18:37:06+00:00| seen|...

CVE-2026-46765

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-19 04:07:07+00:00| seen|...

CVE-2026-35327

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...

Improper Restriction of Names for Files and Other Resources

Overview yt-dlp is an A youtube-dl fork with additional features and patches Affected versions of this package are vulnerable to Improper Restriction of Names for Files and Other Resources via insufficient sanitization of file extensions during the file download. An attacker can cause arbitrary...

CVE-2026-47747

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the BINUNICODE opcode...

CVE-2026-47750

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the GLOBAL opcode...

CVE-2026-47749

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORTBINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...