CVE-2026-9785

creationtimestamp| type| source ---|---|--- 2026-06-25 01:34:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bzdgdzn2x 2026-06-30 18:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjlspnked2a...

CVE-2026-7570

creationtimestamp| type| source ---|---|--- 2026-06-25 01:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bp7gze52t 2026-06-30 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjsjcjla62v...

CVE-2026-7569

creationtimestamp| type| source ---|---|--- 2026-06-25 01:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bjesd6v2s 2026-06-30 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjqtn4b2y2a...

Important: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

GHSA-5GF7-WJFM-VMVM

creationtimestamp| type| source ---|---|--- 2026-06-25 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp34su7fvx26...

PT-2026-52199

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.3 through 18.11.5 GitLab CE/EE versions 19.0 through 19.0.2 GitLab CE/EE versions 19.1 through 19.1.0 Description Improper URL validation in mirror synchronization allows an authenticated user with maintainer-role...

RHCOS 4 : OpenShift Container Platform 4.13.68 (RHSA-2026:26541)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:26541 advisory. - golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 - golang: net/url: Memory exhaustion in quer...

CVE-2026-49277

creationtimestamp| type| source ---|---|--- 2026-06-24 23:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ztnvgtv22...

CVE-2026-33235

creationtimestamp| type| source ---|---|--- 2026-06-24 22:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2zbqsyw22g...

CVE-2026-45687

creationtimestamp| type| source ---|---|--- 2026-06-24 22:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ykfp6xu2f...

CVE-2026-49278

creationtimestamp| type| source ---|---|--- 2026-06-24 22:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xvn64o72k...

CVE-2020-14068

creationtimestamp| type| source ---|---|--- 2026-06-24 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2wgdt2t22m...

CVE-2020-15362

creationtimestamp| type| source ---|---|--- 2026-06-24 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2uqp3eve24...

CVE-2026-47733

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into and attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses...

CVE-2026-4297

creationtimestamp| type| source ---|---|--- 2026-06-24 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2tl5xum72l...

CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...

CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

CVE-2026-54066

SiYuan (

CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...