CVE-2026-20136

creationtimestamp| type| source ---|---|--- 2026-04-15 18:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjwvn37e2t 2026-07-03 10:46:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqelg5ydk2w...

CVE-2026-20081

creationtimestamp| type| source ---|---|--- 2026-04-15 18:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjt2moz52a 2026-04-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260417...

CVE-2026-39845 Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround...

CVE-2026-39845

Weblate (web-based localization tool) has a vulnerability in versions prior to 5.17 where the webhook add-on did not apply SSRF protections. The root cause is exposure via the webhook add-on’s fetch_url() path, enabling potential SSRF risks as described in the CVE entry. The issue is fixed in ver...

CVE-2026-39845 Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround...

CVE-2026-6310

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjksqevtfj2z 2026-04-15 23:26:54+00:00|...

CVE-2026-6307

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 22:00:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvg6qnoi2w 2026-04-15 23:26:54+00:00|...

CVE-2026-6302

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:54:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkv3gnbe32z 2026-04-15 23:26:33+00:00|...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via “Contact Point Writer” role that by default grants permission to alert.notifications:write or alert.notifications.receivers:test actions. An attacker can gain unauthorized access to sensitive configuration data,...

CVE-2026-1636

creationtimestamp| type| source ---|---|--- 2026-04-15 15:51:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkastkvv52o...

CVE-2026-1852

creationtimestamp| type| source ---|---|--- 2026-04-15 15:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkajv3ytc2r...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Critical: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-0636

creationtimestamp| type| source ---|---|--- 2026-04-15 13:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjzi73hgl2t...

Security update for python311

This update for python311 fixes the following issues: Updated to Python 3.11.15 CVE-2025-6075: If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables bsc1252974. CVE-2025-11468: header injection when folding a long...

CVE-2026-3505

creationtimestamp| type| source ---|---|--- 2026-04-15 13:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjywbtahg2a 2026-04-15 15:20:23+00:00| published-proof-of-concept| Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA 2026-05-04 04:00:43+00:00| seen|...

CVE-2025-40899

creationtimestamp| type| source ---|---|--- 2026-04-15 13:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjyeesk4e2o 2026-04-15 17:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjken4pvfd2a 2026-04-17 17:30:59+00:00| published-proof-of-concept|...