CVE-2026-48349

creationtimestamp| type| source ---|---|--- 2026-07-21 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l...

GHSA-H95V-H523-3MW8

creationtimestamp| type| source ---|---|--- 2026-07-21 00:31:29+00:00| seen| https://gist.github.com/alon710/07f073f92ce20c0890f37523b73f7af8...

Oracle Linux 10 : python3.12 (ELSA-2026-39183)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39183 advisory. 3.12.13-2.0.1.el102.1 - Remove upstream URL reference 3.12.13-2.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 Tenable has extracted the preceding...

PT-2026-63275

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A blind Server-Side Request Forgery SSRF exists when the oauth2 client UPDATE AVATAR = true setting is enabled. The issue occurs because the server fetches the avatar URL provided by an...

PT-2026-63290

Name of the Vulnerable Software and Affected Versions Gitea version 1.26.2 Description The software contains two Server-Side Request Forgery SSRF issues. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location, potentially accessing...

The vulnerability of the URL processor for web interfaces in the microprogramming software for D-Link DNS-320 network storage devices allows a perpetrator to cause a service failure.

The vulnerability of the URL processor in the web interface of the D-Link DNS-320 network storage microprogramming system is related to errors in access control when processing the File parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2026-63307

Name of the Vulnerable Software and Affected Versions Gitea versions 1.26.4 and earlier Description The restore-repo CLI command fails to properly validate the Head.CloneURL field when parsing pull request.yml from a repository dump. The safety check function CheckAndEnsureSafePR is called with a...

CVE-2026-57495

creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

Impact With trailingSlash: 'always' configured, the @astrojs/node standalone server's static file handler appends a trailing slash to request paths and issues a 301 redirect. Paths beginning with /\ slash-backslash were not recognized as internal paths, so the handler would echo the raw path back...

CVE-2026-64651

creationtimestamp| type| source ---|---|--- 2026-07-20 22:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eghjh6n2i...

CVE-2026-44509

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4e5isavb2q...

CVE-2026-64626

AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...

GHSA-G6XQ-892H-64W3 Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Summary When Composer is run with -vvv debug verbosity, it could print a credential that was embedded directly in a repository or package URL, but not as a password, to its debug output. Composer already masked the password portion of such URLs, but the username portion was shown in clear text...

Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Summary When Composer is run with -vvv debug verbosity, it could print a credential that was embedded directly in a repository or package URL, but not as a password, to its debug output. Composer already masked the password portion of such URLs, but the username portion was shown in clear text...

CVE-2026-64626 AVideo Encoder downloadURL SSRF via unpinned retry fallback

AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...

EUVD-2026-44672

Directus: SSRF Protection Bypass via 0.0.0.0 in File Import...

CVE-2026-60028

creationtimestamp| type| source ---|---|--- 2026-07-20 21:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ayi6xas2o...

EUVD-2026-42336

Mistune renderers/html.safeurl: HARMFULPROTOCOLS list misses legacy and chained schemes that historically chain to javascript: execution...

GHSA-QFRW-5RXM-MHH2 Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

Summary Type: URL-scheme allowlist gap. The safeurl filter only blocks the four schemes javascript:, vbscript:, file:, data:. Several other schemes are accepted into rendered and tags despite being known XSS vectors in legacy or chain-handling browsers. The same gap applies to direct links,...

GHSA-8C25-4J27-2RV3 Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Summary An XSS vulnerability in Mistune allows bypassing of safeurl protections via percent-encoded javascript URIs. Details The vulnerability exists in HTMLRenderer.safeurl in Mistune. The function is intended to block harmful URL schemes such as "javascript:" by checking the prefix of the...