PT-2026-54442

Name of the Vulnerable Software and Affected Versions @cedar-policy/authorization-for-expressjs versions prior to 0.3.0 Description This middleware integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions. A discrepancy exists because the middleware uses...

Important: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via...

PT-2026-53811

Name of the Vulnerable Software and Affected Versions Editorial Rating – Product Review & Rating System versions prior to 4.0.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access and above to perform Stored Cross-Site...

CVE-2026-56968

creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27...

CVE-2026-54829

creationtimestamp| type| source ---|---|--- 2026-06-29 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mphmmd2wiq2i...

CVE-2026-43722

creationtimestamp| type| source ---|---|--- 2026-06-29 22:34:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkc6ytr427 2026-07-01 02:50:09+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...

CVE-2026-43720

creationtimestamp| type| source ---|---|--- 2026-06-29 22:33:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkaonv6522 2026-07-01 02:50:04+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...

CVE-2026-53429

creationtimestamp| type| source ---|---|--- 2026-06-29 22:19:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjheouc225...

CVE-2026-43725

creationtimestamp| type| source ---|---|--- 2026-06-29 22:18:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjez6vuf23 2026-07-01 02:50:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...

CVE-2026-53916

creationtimestamp| type| source ---|---|--- 2026-06-29 22:11:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphiyhkhyq2g 2026-07-03 10:53:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqexp6nu22y...

CVE-2026-38639

creationtimestamp| type| source ---|---|--- 2026-06-29 21:48:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhovmjzu2n...

CVE-2026-52760

creationtimestamp| type| source ---|---|--- 2026-06-29 21:38:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphh55tg752z...

CVE-2026-49434

creationtimestamp| type| source ---|---|--- 2026-06-29 21:28:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgldvzkq2a 2026-07-03 10:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfcdufmu2u...

CVE-2026-46417

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server. The issue stems from how...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the readremotefile function. An attacker can access internal network resources or disclose arbitrary local files by supplying a crafted CSS file containing a malicious @import url... directive, which...

CVE-2026-57498

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server ownership with Server::whereTeamId$teamId before any operation. However, multiple Livewire web UI components accept...

CVE-2026-39031

creationtimestamp| type| source ---|---|--- 2026-06-29 20:02:51+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphbsqpagi2y 2026-06-29 21:41:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhdtfuob2e 2026-07-13 22:00:21+00:00| seen|...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...