THREAT OPS › Threat News

Threat Intelligence News

11598 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

[NVD] CVE-2026-84936 (MEDIUM 5.3) — The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeated billable third-party API requests using the site's own configured API key, and to create an unbounnvd · 2026-09-05
[NVD] CVE-2026-84935 (HIGH 8.0) — The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minimal permissions such as Subscribers to stornvd · 2026-09-05
[NVD] CVE-2026-84934 (HIGH 8.0) — The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX actions and lets the request choose which internal action runs, allowing any authenticated users such as Subscribers to import arbitrary JCH Optimize WordPress plugnvd · 2026-09-05
[NVD] CVE-2026-84931 (MEDIUM 6.8) — The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing users with the Author role and above to inject arbitrary HTML attributes and JavaScript that execute nvd · 2026-09-05
[NVD] CVE-2026-84930 (MEDIUM 6.8) — The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, allowing users with the Author role and above to inject arbitrary web scripts that execute in the brnvd · 2026-09-05
[NVD] CVE-2026-84927 (LOW 2.7) — The EmbedPress WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entries an administrator configured and injectingnvd · 2026-09-05
[NVD] CVE-2026-84926 (LOW 2.7) — The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to administrators, allowing any authenticated user with contributor-level access or above to read the site administrator's email address, a value WordPress convd · 2026-09-05
[NVD] CVE-2026-84901 (MEDIUM 4.9) — The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event they do not own and to create, edit and delnvd · 2026-09-05
[NVD] CVE-2026-84899 (MEDIUM 6.8) — The VikWidgetsLoader WordPress plugin before 1.12.0 does not sanitise or escape a block attribute before outputting it inside an inline script, allowing users with the Contributor role to store arbitrary JavaScript that executes in the browser of any user viewing the affected ponvd · 2026-09-05
[NVD] CVE-2026-84898 (MEDIUM 6.6) — The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.nvd · 2026-09-05
[NVD] CVE-2026-84896 (MEDIUM 6.8) — The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of any visitor to the anvd · 2026-09-05
[NVD] CVE-2026-84745 (LOW 2.7) — The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowing users with a low-privilege role such as contributor to read the full contents of every unpublished record on the site, nvd · 2026-09-05
[NVD] CVE-2026-84225 (LOW 2.2) — The Kirki WordPress plugin before 6.3.0 does not check that a user is allowed to act on a collaboration comment before changing its state, allowing users whom an administrator has granted content-level access to the page builder to modify comments left by other users, including nvd · 2026-09-05
[NVD] CVE-2026-84221 (MEDIUM 6.8) — The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials.nvd · 2026-09-05
[NVD] CVE-2026-84022 (MEDIUM 6.8) — The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before outputting them in HTML attributes, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected nvd · 2026-09-05
[NVD] CVE-2026-84021 (MEDIUM 6.8) — The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a usernvd · 2026-09-05
[NVD] CVE-2026-83544 (MEDIUM 6.8) — The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.nvd · 2026-09-05
[NVD] CVE-2026-83543 (MEDIUM 4.1) — The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response.nvd · 2026-09-05
[NVD] CVE-2026-82846 (MEDIUM 6.8) — The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, allowing users with a course-author role to perform Stored Cross-Site Scripting attacks that run in the session of anyonenvd · 2026-09-05
[NVD] CVE-2026-81424 (MEDIUM 5.3) — The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at least the referenced product's price, allnvd · 2026-09-05
[NVD] CVE-2026-81423 (MEDIUM 4.3) — The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.nvd · 2026-09-05
[NVD] CVE-2026-81404 (HIGH 7.1) — The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who are tricked into submitting a craftednvd · 2026-09-05
[NVD] CVE-2026-81348 (LOW 3.7) — The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory nvd · 2026-09-05
[NVD] CVE-2026-78438 (HIGH 7.2) — The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticnvd · 2026-09-05
[NVD] CVE-2026-78362 — The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take ovnvd · 2026-09-05
[NVD] CVE-2026-78150 — The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and nvd · 2026-09-05
[NVD] CVE-2026-78149 — The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guardnvd · 2026-09-05
[NVD] CVE-2026-77830 (HIGH 7.2) — The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitization and output escaping. This makes it nvd · 2026-09-05
[NVD] CVE-2026-77826 — The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain, or to create and nvd · 2026-09-05
[NVD] CVE-2026-4361 (MEDIUM 5.0) — The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the `et_pb_set_video_oembed_thumbnail_resolution()` function using `wp_remote_get()` instead of `wp_safe_remote_get()` to fetch a remote image URnvd · 2026-09-05
[NVD] CVE-2026-3853 (MEDIUM 6.4) — The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the `et_pb_video_slider_item` shortcode in all versions up to, and including, 4.27.6. This is due to the `image_src` field not being included in the `$url_options`nvd · 2026-09-05
[NVD] CVE-2026-19887 (HIGH 8.8) — The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via deserialization of untrusted input in the Telecom EDY payment callback (usces_action_acting_transaction). Unauthenticated attackers can store arbitranvd · 2026-09-05
[NVD] CVE-2026-19861 — The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a form field's value before including it in the HTML notification emails it sends, allowing unauthenticated users to inject arbitrary HTML into messages deliverenvd · 2026-09-05
[NVD] CVE-2026-19858 — The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perform authorisation checks when resolving request-derived data during page rendering, allowing unauthenticated users to read arbitrary user, post and term properties and metadata, includinnvd · 2026-09-05
[NVD] CVE-2026-19769 (HIGH 7.2) — The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and outnvd · 2026-09-05
[NVD] CVE-2026-18843 (MEDIUM 6.1) — The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanitization and output escaping. This makes invd · 2026-09-05
[NVD] CVE-2026-18406 (HIGH 7.2) — The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escapnvd · 2026-09-05
[NVD] CVE-2026-16649 (HIGH 7.2) — The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arnvd · 2026-09-05
[NVD] CVE-2026-15984 (HIGH 7.2) — The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitnvd · 2026-09-05
[NVD] CVE-2026-15247 — The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google servicnvd · 2026-09-05
[NVD] CVE-2026-14975 (MEDIUM 6.5) — The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the 'remoteurl' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary nvd · 2026-09-05
[NVD] CVE-2025-15694 — The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfilterenvd · 2026-09-05
[NVD] CVE-2025-15693 — The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to envd · 2026-09-05
[NVD] CVE-2026-8625 (MEDIUM 6.4) — The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (Custom HTML block inner HTML)' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitizatinvd · 2026-09-05
[NVD] CVE-2026-8623 (MEDIUM 6.4) — The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitnvd · 2026-09-05
[NVD] CVE-2026-86145 (HIGH 8.2) — PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacnvd · 2026-09-05
[NVD] CVE-2026-83628 (MEDIUM 4.3) — The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the `tml_ms_signup_handler()` function's `gimmeanotherblog` branch failing to enforce the network's `active_signup` rnvd · 2026-09-05
[NVD] CVE-2026-83627 (CRITICAL 9.8) — The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug log is written to wnvd · 2026-09-05
[NVD] CVE-2026-77263 (HIGH 7.2) — The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.13.4 due to insufficient input sanitization and output escaping. This makes it pnvd · 2026-09-05
[NVD] CVE-2026-77233 (HIGH 7.2) — The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite in all versions up to, and including, 3.13.4 due to insufficient input sanitization and outputnvd · 2026-09-05
[NVD] CVE-2026-18404 (MEDIUM 6.4) — The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input sanitization and output escaping. This makesnvd · 2026-09-05
[NVD] CVE-2026-13447 (CRITICAL 9.8) — The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which decodes and validates nvd · 2026-09-05
[NVD] CVE-2025-14945 (MEDIUM 5.4) — The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event attribute values in all versions up to, and including, 7.3.3. This is due to insufficient input sanitization when storing attribute values (usinnvd · 2026-09-05
[NVD] CVE-2026-86144 (MEDIUM 5.6) — In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entitynvd · 2026-09-05
[NVD] CVE-2026-86143 (MEDIUM 6.9) — In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that lengthnvd · 2026-09-05
[pear] Kovo Healthtech Corp posted to leak siteransomware_live · 2026-09-05
[spacebears] D-MAX Engineering, Inc posted to leak siteransomware_live · 2026-09-05
WordPress Security Plugins: How to Choose the Right Onesucuri_blog · 2026-09-05
[emperador] Judicial Branch of the Province of Jujuy posted to leak siteransomware_live · 2026-09-05
pcre2 version 10.48 released with security fixesoss_sec · 2026-09-04
[NVD] CVE-2026-77393 (HIGH 8.8) — In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on thinvd · 2026-09-04
[NVD] CVE-2026-75925 (CRITICAL 9.6) — Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequnvd · 2026-09-04
[GHSA] GHSA-7q9c-hpx7-9cwm (high) — TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stopgithub_advisories · 2026-09-04
[GHSA] GHSA-rh53-xvx2-j327 (critical) — OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutationgithub_advisories · 2026-09-04
[GHSA] GHSA-pr7f-p5mw-fc87 (medium) — vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt partsgithub_advisories · 2026-09-04
[GHSA] GHSA-48jh-3gj7-fg8v (medium) — vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2mgithub_advisories · 2026-09-04
[GHSA] GHSA-hwrm-c4cx-rf4j (medium) — vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messagesgithub_advisories · 2026-09-04
[GHSA] GHSA-8737-qx52-hjff (medium) — vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output boundsgithub_advisories · 2026-09-04
Vulnerability fixes in util-linux-2.42.3oss_sec · 2026-09-04
[GHSA] GHSA-mp7r-57w4-5qm3 (medium) — SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the passwordgithub_advisories · 2026-09-04
Vulnerabilities fixed in libxml2-2.15.4oss_sec · 2026-09-04
[NVD] CVE-2026-85703 (MEDIUM 6.5) — A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. Thenvd · 2026-09-04
[GHSA] GHSA-h4v5-crx2-3cv4 (high) — SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readersgithub_advisories · 2026-09-04
[GHSA] GHSA-h6w7-xxcf-w2mq (high) — SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readersgithub_advisories · 2026-09-04
[GHSA] GHSA-34fj-mwm6-fjfg (high) — SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConfgithub_advisories · 2026-09-04
[GHSA] GHSA-fgmr-7w36-9qfq (medium) — SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readersgithub_advisories · 2026-09-04
[GHSA] GHSA-f2rw-w22v-54vh (medium) — SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readersgithub_advisories · 2026-09-04
Friday Squid Blogging: Squid on a Stick at the New York State Fairschneier · 2026-09-04
[lockbit5] pscindustries.com posted to leak siteransomware_live · 2026-09-04
[GHSA] GHSA-mfrj-v65r-979c (high) — SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columnsgithub_advisories · 2026-09-04
[lockbit5] kalahealth.eu posted to leak siteransomware_live · 2026-09-04
[lockbit5] huisartsencentrumkleiniterson.nl posted to leak siteransomware_live · 2026-09-04
[GHSA] GHSA-5w7r-f4cg-rqq7 (medium) — SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readersgithub_advisories · 2026-09-04
[GHSA] GHSA-66r2-5gwj-gxm2 (medium) — SurrealDB: Writes in a PERMISSIONS clause bypass table permissionsgithub_advisories · 2026-09-04
The Director's Cut: Cyber is Changing Risk Faster Than Board Oversight Is Adaptingzscaler_threatlabz · 2026-09-04
OpenSSF at Hacker Summer Camp 2026: Black Hat & DEF CON Highlights and Recapopenssf_blog · 2026-09-04
[GHSA] GHSA-848m-r628-vrxw (high) — SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL pathgithub_advisories · 2026-09-04
[SilentRansomGroup] H... C... posted to leak siteransomware_live · 2026-09-04
[NVD] CVE-2026-85638 (HIGH 7.3) — A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and convd · 2026-09-04
How to secure edge AI in customer-owned environmentsmsstic · 2026-09-04
AL26-019 - Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway - CVE-2026-19490 and CVE-2026-19489cccs_ca · 2026-09-04
[GHSA] GHSA-gx45-xrj5-g6c4 (high) — CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repositorygithub_advisories · 2026-09-04
[GHSA] GHSA-wrj3-vj8c-784f (high) — CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)github_advisories · 2026-09-04
[GHSA] GHSA-c6mw-8xh8-gpq6 (high) — CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approvalgithub_advisories · 2026-09-04
[GHSA] GHSA-6v2g-fpxh-pmmh (critical) — CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinninggithub_advisories · 2026-09-04
[GHSA] GHSA-h539-c7r8-3xq4 (high) — CodeWhale: js_execution leaks parent environment to model context via missing env scrubgithub_advisories · 2026-09-04
[GHSA] GHSA-7j5w-7r7x-9v27 (high) — CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approvalgithub_advisories · 2026-09-04
[GHSA] GHSA-g29h-pfmp-qp9r (high) — CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)github_advisories · 2026-09-04
[GHSA] GHSA-62f5-cp2p-vq95 (high) — CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repositorygithub_advisories · 2026-09-04
[direwolf] Wolfram Research posted to leak siteransomware_live · 2026-09-04