PYSEC-2026-2453 Docassemble unauthorized access through URL manipulation

Impact The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. Patches The vulnerability has been patched in version 1.4.97 of the master branch. The Docker image on docker.io has been patched...

MAL-2026-10444 Malicious code in markable-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd358271f202636f12507f09da4e8f00c900ba46c9dca25a5a0526d35b75bf1d [email protected] declares scripts.preinstall = 'node index.d.js'. index.d.js base64-decodes an embedded payload and invokes it through an...

OPENSUSE-SU-2026:21319-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling bsc1257692. - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session...

CVE-2026-57805

creationtimestamp| type| source ---|---|--- 2026-07-13 12:34:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpbecik52e...

CVE-2026-61955

creationtimestamp| type| source ---|---|--- 2026-07-13 11:59:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjndygvcm2y 2026-07-13 18:04:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkbqk2co427 2026-07-14 02:02:07+00:00| seen|...

CVE-2026-61956

creationtimestamp| type| source ---|---|--- 2026-07-13 11:56:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn5hwcrf2f 2026-07-13 19:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhf5qieu2c 2026-07-14 02:20:58+00:00| seen|...

CVE-2026-59521

creationtimestamp| type| source ---|---|--- 2026-07-13 11:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn4eonhm2z 2026-07-13 19:45:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhecakde22 2026-07-14 02:20:17+00:00| seen|...

CVE-2026-59516

creationtimestamp| type| source ---|---|--- 2026-07-13 11:54:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn2rtdon22 2026-07-13 19:04:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkf3xenwt2z 2026-07-14 02:05:01+00:00| seen|...

CVE-2026-57734

creationtimestamp| type| source ---|---|--- 2026-07-13 11:21:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjla432an2y...

CVE-2026-57733

creationtimestamp| type| source ---|---|--- 2026-07-13 11:21:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjl6z33xh27 2026-07-13 21:33:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqknexzdpt27 2026-07-16 07:57:09+00:00| seen|...

CVE-2026-57728

creationtimestamp| type| source ---|---|--- 2026-07-13 11:19:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjl3decem2e 2026-07-16 07:56:52+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr6ay6ty2b...

CVE-2026-57710

creationtimestamp| type| source ---|---|--- 2026-07-13 11:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkzd2pp525...

CVE-2026-57707

creationtimestamp| type| source ---|---|--- 2026-07-13 11:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkzbmvef2h...

CVE-2026-57401

creationtimestamp| type| source ---|---|--- 2026-07-13 11:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkvoqkrv2h...

CVE-2026-22102

creationtimestamp| type| source ---|---|--- 2026-07-13 11:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjks3uozc2t 2026-07-13 18:58:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkepq5v6a2w 2026-07-14 03:05:58+00:00| seen|...

CVE-2026-22096

creationtimestamp| type| source ---|---|--- 2026-07-13 11:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkkyqbj62r 2026-07-13 18:49:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkeb3m33j2e 2026-07-14 03:05:36+00:00| seen|...

CVE-2026-57386

creationtimestamp| type| source ---|---|--- 2026-07-13 11:00:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjzvwbef27 2026-07-16 07:56:00+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr4phxr524...

CVE-2026-57772

creationtimestamp| type| source ---|---|--- 2026-07-13 10:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjjbh4rv25 2026-07-13 22:07:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpbmzimm27...

CVE-2026-57375

creationtimestamp| type| source ---|---|--- 2026-07-13 10:48:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjdvgpsn27 2026-07-13 18:56:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkemc3tb22i...

PYSEC-2026-3441

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...