CVE ID :CVE-2026-73253 Published : Aug. 20, 2026, 6:16 p.m. | 28 minutes ago Description :Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can…
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier…
CVE ID :CVE-2026-75149 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server…
CVE ID :CVE-2026-72717 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${…} expression or backtick in a schema default…
CVE ID :CVE-2026-72716 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${…} expression or backtick in a query parameter…
CVE ID :CVE-2026-73541 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service…
CVE ID :CVE-2025-9210 Published : Aug. 18, 2026, 6:25 p.m. | 34 minutes ago Description :Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs…
CVE ID :CVE-2026-47627 Published : Aug. 18, 2026, 6:23 p.m. | 36 minutes ago Description :NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service. Severity:…
CVE ID :CVE-2026-75130 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the…
CVE ID :CVE-2026-75625 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece…