Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration and mirror synchronization process. An attacker can access internal Git repositories and exfiltrate sensitive data by submitting a crafted migration URL that causes the server...

CVE-2026-16454

creationtimestamp| type| source ---|---|--- 2026-07-21 19:15:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6jh27gnh2j...

fast-uri vulnerable to host confusion via failed IDN canonicalization

Impact fast-uri versions = 2.3.1, = 4.0.0 fail to canonicalize Unicode/IDN hostnames for HTTP-family URLs. The IDN conversion path calls URL.domainToASCII... on the global WHATWG URL constructor, where that helper does not exist. The resulting TypeError is silently routed into parsed.error, but...

EUVD-2026-40093

fast-uri vulnerable to host confusion via failed IDN canonicalization...

CVE-2026-15792

creationtimestamp| type| source ---|---|--- 2026-07-21 18:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hem5ttx2q...

CVE-2026-15789

creationtimestamp| type| source ---|---|--- 2026-07-21 18:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gi6jkll2g...

CVE-2026-47410

creationtimestamp| type| source ---|---|--- 2026-07-21 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q 2026-07-21 19:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23...

CVE-2026-44227

A flaw was found in RT, an issue and ticket tracking system. This reflected Cross-Site Scripting XSS vulnerability allows a remote attacker to execute arbitrary JavaScript code in an authenticated user's browser session. This can happen if an attacker convinces an authenticated user to visit a...

CVE-2026-64824

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-16447

creationtimestamp| type| source ---|---|--- 2026-07-21 16:37:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr6amohkrb2g...

CVE-2026-28306

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6ldxen24 2026-07-26 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl4xkp7un23...

CVE-2026-47395 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, PraisonAI's direct-prompt CLI automatically expands @url: mentions in raw prompt text before agent execution begins. If a prompt contains @url:, the CLI calls...

CVE-2026-47395 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, PraisonAI's direct-prompt CLI automatically expands @url: mentions in raw prompt text before agent execution begins. If a prompt contains @url:, the CLI calls...

CVE-2026-47395

CVE-2026-47395 – PraisonAI CLI loopback/SSRF via @url: mentions Prior to PraisonAI v4.6.40 (and praisonaiagents v1.6.40), the direct-prompt CLI automatically expands @url:(http|https) prompts, performing an unrestricted urllib.request.urlopen() to the attacker-controlled URL. The fetched response...

CVE-2026-65048

creationtimestamp| type| source ---|---|--- 2026-07-21 15:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr65bleqo52e 2026-07-23 01:01:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrbn7txhu52l 2026-07-23 02:02:33+00:00| seen|...

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

Summary Loofah::HTML5::Scrub.alloweduri? does not correctly reject javascript: URIs when the scheme is split or prefixed by the HTML5 named character references tab or line feed. This is a bypass of the fix for GHSA-46fp-8f5p-pf2m, which handled the equivalent numeric character references , , but...

CVE-2026-59846

creationtimestamp| type| source ---|---|--- 2026-07-21 14:35:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5zrvgfjv2q...

CVE-2026-16402

creationtimestamp| type| source ---|---|--- 2026-07-21 13:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xnw5tvw23 2026-07-22 04:47:38+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 18:42:04+00:00| seen|...

CVE-2026-64628

creationtimestamp| type| source ---|---|--- 2026-07-21 13:18:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vhspcma2g...

SUSE CVE-2026-63896

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GETURL handling The WebUSB GETURL handler in compositesetup narrows landingpagelength to fit the host-supplied wLength using landingpagelength = wlength -...