CVE-2026-0814

creationtimestamp| type| source ---|---|--- 2026-04-20 11:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjwevx2hzz24...

CVE-2026-5478

creationtimestamp| type| source ---|---|--- 2026-04-20 11:29:53+00:00| seen| https://bsky.app/profile/hurayraiit.com/post/3mjweiuy63s2n 2026-04-20 20:23:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcd233br2c 2026-04-20 21:22:19+00:00| published-proof-of-concept|...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-6625

creationtimestamp| type| source ---|---|--- 2026-04-20 11:16:38+00:00| seen| Telegram/dHFBNa6z0pCHPScrBZS6WnqsKmYP7k1ORYb9rRTMhJ2WJuM 2026-04-20 12:20:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwhd2vsya2i...

CVE-2026-6625

A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureByUrl of the file mogupicture/src/main/java/com/moxi/mogublog/picture/service/impl/LocalFileServiceImpl.java of the component Picture...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

EUVD-2026-23805

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function getapitoolproviderremoteschema of the file api/services/tools/apitoolsmanageservice.py of the component ApiToolManageService. Performing a manipulation of the argument url results in server-side...

CVE-2026-6625

A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureByUrl of the file mogupicture/src/main/java/com/moxi/mogublog/picture/service/impl/LocalFileServiceImpl.java of the component Picture...

CVE-2026-6613

creationtimestamp| type| source ---|---|--- 2026-04-20 08:17:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzri6ulf2q...

CVE-2026-6610

creationtimestamp| type| source ---|---|--- 2026-04-20 08:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvz24uuwb2k...

CVE-2026-6614

creationtimestamp| type| source ---|---|--- 2026-04-20 07:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvy5gpocu2c...

CVE-2026-6608

creationtimestamp| type| source ---|---|--- 2026-04-20 07:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxztxyb32r...

CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6618 langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6598

creationtimestamp| type| source ---|---|--- 2026-04-20 07:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxniokvd2q...

CVE-2024-7083

creationtimestamp| type| source ---|---|--- 2026-04-20 07:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxlna6wz2c 2026-04-25 10:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcto3ywfa2h...

CVE-2026-4079

creationtimestamp| type| source ---|---|--- 2026-04-20 07:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjvxis6jj724...

CVE-2026-6617 langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function getapitoolproviderremoteschema of the file api/services/tools/apitoolsmanageservice.py of the component ApiToolManageService. Performing a manipulation of the argument url results in server-side...

Server-side Request Forgery (SSRF)

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processaudioblock function. An attacker can make unauthorized requests to internal or external systems by supplying crafte...