CVE-2026-10546

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF vulnerability in the URL component src/lfx/src/lfx/components/datasource/url.py due to a Time-of-Check/Time-of-Use TOCTOU race condition that can be exploited via DNS rebinding...

CVE-2026-10546

CVE-2026-10546 affects IBM Langflow OSS versions 1.0.0–1.9.3. A Server-Side Request Forgery (SSRF) in the URL component (src/lfx/src/lfx/components/data_source/url.py) arises from a TOCTOU race condition that can be exploited via DNS rebinding. The vulnerability stems from validating URLs in vali...

CVE-2026-10546 DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF vulnerability in the URL component src/lfx/src/lfx/components/datasource/url.py due to a Time-of-Check/Time-of-Use TOCTOU race condition that can be exploited via DNS rebinding...

EUVD-2026-40402

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF vulnerability in the URL component src/lfx/src/lfx/components/datasource/url.py due to a Time-of-Check/Time-of-Use TOCTOU race condition that can be exploited via DNS rebinding...

CVE-2026-10655

creationtimestamp| type| source ---|---|--- 2026-06-30 18:17:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmfwxtzh2v...

GHSA-G4W6-VMGF-XQVX @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

Summary @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. An issue exists where, under...

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

Summary @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. An issue exists where, under...

CVE-2026-58174

creationtimestamp| type| source ---|---|--- 2026-06-30 18:03:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z 2026-07-02 06:06:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k...

CVE-2026-58377

creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...

CVE-2026-12349

creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...

GHSA-5Q4Q-834J-G8G4 Paymenter has URL parameter injection that bypasses paid plan limits at checkout

Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurations, a...

CVE-2026-58014

creationtimestamp| type| source ---|---|--- 2026-06-30 14:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjatls7xm2z 2026-07-02 05:52:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndpmanhq2i 2026-07-21 12:01:01+00:00| seen|...

CVE-2026-13474

creationtimestamp| type| source ---|---|--- 2026-06-30 14:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7prwa4f2j 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58010

creationtimestamp| type| source ---|---|--- 2026-06-30 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6dq57qp2t 2026-07-03 12:18:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjqorsrj2j 2026-07-05 03:23:39+00:00| seen|...

CVE-2026-58374

creationtimestamp| type| source ---|---|--- 2026-06-30 14:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj67lqvub23 2026-07-06 12:03:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpy2c74dl62h...

CVE-2026-47105

creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...

CVE-2026-14162

Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...

CVE-2026-12610

creationtimestamp| type| source ---|---|--- 2026-06-30 10:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiscbuw6r2w 2026-07-30 16:31:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mruuhjm6g22i 2026-07-30 16:31:36+00:00| seen|...

CVE-2026-14164

creationtimestamp| type| source ---|---|--- 2026-06-30 10:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirik6atm2z 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...

CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...