PYSEC-2026-3441

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 before 1.2.1.Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-41041

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

PYSEC-2026-3441

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-62143

creationtimestamp| type| source ---|---|--- 2026-07-13 09:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjffc5gow2y...

CVE-2026-22099

CVE-2026-22099 affects a charging station where Bluetooth commands do not require authentication. This leads to exposure of sensitive information, potential reboot triggering, and the ability to push a firmware update URL via Bluetooth. The issue is described with high impact on confidentiality, ...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

EUVD-2026-43324

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-15541

creationtimestamp| type| source ---|---|--- 2026-07-13 08:35:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbxeu6uu2e 2026-07-13 10:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjhe6icjz26...

CVE-2026-14165

creationtimestamp| type| source ---|---|--- 2026-07-13 08:29:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjblrq2px2s 2026-07-13 09:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfoycfip2w 2026-07-16 07:53:45+00:00| seen|...

MAL-2026-10426 Malicious code in chai-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ffc5e8b4e25d2d7787eb9f3bb9607114e5e4290f0afe2350499b78d5f95642 [email protected] presents itself as a Mocha reporter mirroring the legitimate eth-gas-reporter project matching author name, README, and badges, but th...

CVE-2026-12274

creationtimestamp| type| source ---|---|--- 2026-07-13 07:48:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj7cel2gg26 2026-07-14 03:15:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlaj7r33z2z...

CVE-2026-15538

creationtimestamp| type| source ---|---|--- 2026-07-13 07:44:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj73oaty727...

CVE-2026-15536

creationtimestamp| type| source ---|---|--- 2026-07-13 07:43:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6zww6kb22...

CVE-2026-11964

creationtimestamp| type| source ---|---|--- 2026-07-13 07:42:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6y7ymo52i 2026-07-13 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaedxj7k2h 2026-07-14 00:00:11+00:00| seen|...

CVE-2026-12273

creationtimestamp| type| source ---|---|--- 2026-07-13 07:41:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6vfbljy2y 2026-07-14 03:38:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlbsllbjm2c...

CVE-2026-4769

creationtimestamp| type| source ---|---|--- 2026-07-13 07:21:18+00:00| seen| https://infosec.exchange/users/certvde/statuses/116911458109125585 2026-07-13 07:54:49+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l 2026-07-13 08:30:05+00:00| seen|...