111022 matches found
CVE-2026-57862
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ilw4ytaebzud5...
CVE-2026-67346
creationtimestamp| type| source ---|---|--- 2026-07-30 15:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6y3reb6zoq65d...
CVE-2026-6540
Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...
CVE-2026-54885
Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound HTTP requests to attacker-chosen URIs, including internal services and cloud metadata endpoints. Three code paths fetch remote...
CVE-2026-67351
creationtimestamp| type| source ---|---|--- 2026-07-30 15:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jzb5ypjqxy4mv 2026-08-01 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bbbxlup2u...
CVE-2026-12722
creationtimestamp| type| source ---|---|--- 2026-07-30 14:51:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a42jzl4lwa5jo...
EUVD-2026-50465
Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation...
GHSA-PGWH-4JJ4-QM8V Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
Summary Numerous HTTP-emitting modules core.api.httpget, core.api.httppost, graphql.query/graphql.mutation, monitor.httpcheck, communication.slacksend, notification.discord,slack,teams.sendmessage, ai.visionanalyze anthropic path, verify.visualdiff, browser.proxyrotate, and the agent/llm inline...
EUVD-2026-50470
Flyto2 Core: Unauthenticated flyto-verification /run: callbackurl SSRF and internal runner-secret exfiltration...
GHSA-JX74-CQJV-2C67 Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
Summary The standalone flyto-verification service exposes POST /run with no authentication, on all interfaces 0.0.0.0:8344 per the shipped Dockerfile. The request body's callbackurl is used verbatim for an outbound POST that unconditionally attaches X-Internal-Key: $FLYTORUNNERSECRET. The...
GHSA-QQ9Q-XGM3-XV9G Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Summary llm.chat reads the operator's provider key from the environment OPENAIAPIKEY, ANTHROPICAPIKEY, ... and sends it in the Authorization: Bearer header to baseurl, a parameter the caller controls. baseurl is only checked against the SSRF guard, and the guard allows any public host, so pointin...
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Summary llm.chat reads the operator's provider key from the environment OPENAIAPIKEY, ANTHROPICAPIKEY, ... and sends it in the Authorization: Bearer header to baseurl, a parameter the caller controls. baseurl is only checked against the SSRF guard, and the guard allows any public host, so pointin...
EUVD-2026-50553
linuxfabrik-lib: fetch forwards credential headers across a cross-origin redirect...
EUVD-2026-51153
Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...
CVE-2026-48910
creationtimestamp| type| source ---|---|--- 2026-07-30 14:37:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dsqsb44f2t5bl...
CVE-2026-18362
creationtimestamp| type| source ---|---|--- 2026-07-30 14:13:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy...
CVE-2026-16971
creationtimestamp| type| source ---|---|--- 2026-07-30 14:13:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy...
EUVD-2026-51138
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...