CVE ID :CVE-2026-72001 Published : Aug. 31, 2026, 7:17 p.m. | 29 minutes ago Description :Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link…
CVE ID :CVE-2026-53552 Published : Aug. 31, 2026, 7:16 p.m. | 29 minutes ago Description :Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd accept a project or project-file row id…
CVE ID :CVE-2026-53507 Published : Aug. 31, 2026, 7:16 p.m. | 29 minutes ago Description :oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff actions…
CVE ID :CVE-2026-79748 Published : Aug. 31, 2026, 6:17 p.m. | 1 hour, 29 minutes ago Description :MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15,…
CVE ID :CVE-2026-81636 Published : Aug. 30, 2026, 7:17 p.m. | 24 minutes ago Description :Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded…
CVE ID :CVE-2026-82549 Published : Aug. 30, 2026, 4:16 p.m. | 3 hours, 25 minutes ago Description :A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation…
CVE ID :CVE-2026-82653 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers…
CVE ID :CVE-2026-82654 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block’s…
CVE ID :CVE-2026-82645 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin endpoint. Supplying a ‘token’ request parameter waives both the Live::canRestream() access gate and…
CVE ID :CVE-2026-82475 Published : Aug. 29, 2026, 5:18 p.m. | 2 hours, 15 minutes ago Description :iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers…