Robuta

https://exploitdog.ru/cve/github/GHSA-whfp-wchg-v9xw Уязвимость GHSA-whfp-wchg-v9xw The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing managem… ghsawhfpwchg https://corgea.com/advisories/malware/GHSA-228h-59rq-fx2m GHSA-228h-59rq-fx2m malware advisory: critical-sev… | Corgea GHSA-228h-59rq-fx2m is a critical-severity malicious package advisory. Affects RubyGems/eilsvntestxzutq. Malicious code in eilsvntestxzutq (RubyGems). ghsamalwareadvisorycritical https://dnasportstalk.com/tag/ghsa/ GHSA – DNA Sports Talk sports talkghsadna https://www.ghsa.net/congratulations-2018-three-position-air-rifle-state-champs Congratulations 2018 Three-Position Air Rifle State Champs | GHSA.net three positionair riflestate champscongratulationsghsa https://www.contagionlive.com/view/the-future-of-the-ghsa-matters-for-clinicians-find-out-why The Future of the GHSA Matters for US Clinicians—Find Out Why | Contagion Live Oct 11, 2026 - Global health security impacts us all and without the Global Health Security Agenda (GHSA), we may see an increase in global public health crises. the future offor usghsamatterscontagion https://corgea.com/advisories/malware/GHSA-22h6-5q95-f432 GHSA-22h6-5q95-f432 malware advisory: critical-sev… | Corgea GHSA-22h6-5q95-f432 is a critical-severity malicious package advisory. Affects RubyGems/aitdodvcpoam. Malicious code in aitdodvcpoam (RubyGems). ghsamalwareadvisorycritical https://athletics.mountvernonschool.org/news/44933 Mustangs Rank No. 16 in Sixth GHSA Class-A Private Football Power Ratings - Mount Vernon School |... Mustangs Rank No. 16 in Sixth GHSA Class-A Private Football Power Ratings - Read the latest news and updates about Mount Vernon School published on October 22,... mount vernon schoolclass amustangsranksixth https://exploitdog.ru/cve/github/GHSA-8ghh-qpmp-7826 Уязвимость GHSA-8ghh-qpmp-7826 Lua Use-After-Free may lead to remote code execution. ### Impact An authenticated user may exploit the synchronization mechanism of the master-replica and tri… ghsa https://exploitdog.ru/cve/github/GHSA-xj44-923v-h49g Уязвимость GHSA-xj44-923v-h49g In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs. In JetBrains YouTrack before 2026.2.19422 missing au… ghsa https://www.apiposture.com/remediation/go-gin/how-to-fix-broken-object-level-authorization-in-go-gin-ghsa-pg67-9wjv-mr85/ Broken Object Level Authorization in Go (Gin) - Guide [GHSA-pg67-9wjv-mr85] | ApiPosture Guide on Broken Object Level Authorization in Go (Gin): ownership checks on resource IDs enable unauthorized reads/writes; apply strict scoping, RBAC, and tests brokenobjectlevelauthorizationgin https://www.ghsa.net/schedule-ranking-view/football/rankings/22 2026 GHSA Football Schedule - Explain Ranking - Northeast | GHSA.net ghsafootballscheduleexplainranking https://hlukh.ch/security-warnings/id/GHSA-C29M-XWM3-CM6R Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) — GHSA-C29M-XWM3-CM6R ## Summary Axios for Node.js parses `data:` URLs in `lib/helpers/fromDataURI.js`. The current RFC-2397 parser uses a regular expression whose media type groups... data urlthe nodeevent loopaxiosredos https://cve.circl.lu/vuln/ghsa-crf3-v9rr-v7hj GHSA-CRF3-V9RR-V7HJ - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup https://corgea.com/advisories/malware/GHSA-2hx4-h7vv-g5xw GHSA-2hx4-h7vv-g5xw malware advisory: critical-sev… | Corgea GHSA-2hx4-h7vv-g5xw is a critical-severity malicious package advisory. Affects RubyGems/batch-insert. Malicious code in batch-insert (RubyGems). ghsamalwareadvisorycritical https://vdb.ai.kr/vuln/GHSA-4233-jc72-56c5 GHSA-4233-jc72-56c5 — Astro: Netlify Image CDN allowlist bypass enables SSRF · VDB Astro: Netlify Image CDN allowlist bypass enables SSRF image cdnghsaastronetlifyallowlist https://corgea.com/advisories/malware/GHSA-8jx6-7rv4-9r5g GHSA-8jx6-7rv4-9r5g malware advisory: critical-sev… | Corgea GHSA-8jx6-7rv4-9r5g is a critical-severity malicious package advisory. Affects npm/@public-for-cdao/deploy. Malicious code in @public-for-cdao/deploy (npm). ghsamalwareadvisorycritical https://exploitdog.ru/cve/github/GHSA-frj6-5rhh-vwfw Уязвимость GHSA-frj6-5rhh-vwfw Duplicate Advisory: Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception. ## Duplicate Advisory This advisory… ghsa https://mondoo.com/vulnerability-intelligence/vulnerability/GHSA-mf33-gv72-w2h5 GHSA-mf33-gv72-w2h5 | Mondoo Vulnerability Intelligence GHSA-mf33-gv72-w2h5 - HIGH severity: CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion ghsavulnerabilityintelligence https://exploitdog.ru/cve/github/GHSA-fx37-w2g6-gg44 Уязвимость GHSA-fx37-w2g6-gg44 PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _read… ghsa https://ghsa.teamip.com/HSA_GHSA_en_US/2022-ghsa-lacrosse-state-championship-29ls-2022-ghsa-lacrosse-state-back-final-gt-html.html 2022 GHSA Lacrosse State Championship 100% polyester heathered wicking knit Wicks moisture away from the body Pad print label Self-fabric crew neck collar Set-in sleeves Double-needle hemmed bottom... state championshipghsalacrosse https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TELEGRAF136-18274583 GHSA-ff52-ph69-cf7x in telegraf-1.36 | Snyk GHSA-ff52-ph69-cf7x in telegraf-1.36 ghsatelegrafsnyk https://vdb.ai.kr/vuln/GHSA-rx4f-c7p8-82vq GHSA-rx4f-c7p8-82vq — undici vulnerable to Denial of Service via WebSocketStream · VDB undici vulnerable to Denial of Service via WebSocketStream unclean close denial of serviceghsaundicivulnerablevia https://exploitdog.ru/cve/github/GHSA-cv33-h348-47m4 Уязвимость GHSA-cv33-h348-47m4 ghsa https://www.ghsa.net/deadline-notification-entry-volleyball-2026-04-01 Deadline for Notification of Entry in Volleyball | GHSA.net deadlinenotificationentryvolleyballghsa https://ninjasignal.ninja/intel/cve/GHSA-p538-c434-8v24 GHSA-p538-c434-8v24 (CVSS 5.4) — Ninja Signal Threat Intelligence | Ninja Signal ## Summary `Commit.count()` forwards `**kwargs` into `rev_list` with **no** `check_unsafe_options` guard (the guard exists only in the sibling `iter_items`, com threat intelligenceghsacvssninjasignal https://cve.circl.lu/vuln/ghsa-j5xq-963p-r9mj GHSA-J5XQ-963P-R9MJ - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup https://cvepremium.circl.lu/vuln/ghsa-rj44-3777-mh5x GHSA-RJ44-3777-MH5X - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup https://prepsportsreport.com/p/how-benedictine-lacrosse-is-dodging-adversity-this-ghsa-season How Benedictine Lacrosse is Dodging Adversity this GHSA Season : Prep Sports Report Heading into play this week, the Cadets have won prep sportsbenedictinelacrossedodgingadversity https://ninjasignal.ninja/intel/cve/GHSA-qr2g-p6q7-w82m GHSA-qr2g-p6q7-w82m — Ninja Signal Threat Intelligence | Ninja Signal ### Impact A security vulnerability exists in outdated versions of the x402 SDK. This vulnerability does not affect users' private keys, smart contracts, or f threat intelligenceghsaninjasignal https://www.ghsa.net/deadline-post-cross-country-rosters-electronically-2023-10-20-000000 Deadline to Post Cross Country Rosters (Electronically) | GHSA.net cross countrydeadlinepostrosterselectronically https://www.ajc.com/sports/2026/09/mt-bethel-christian-first-ghsa-region-game/ Mt. Bethel Christian’s 2 games this week include first-ever GHSA region contest Mt. Bethel Christian is one of the GHSA’s youngest football programs and will play its first GHSA region game on Friday at Mount Vernon. this weekfirst everbethelgamesinclude https://corgea.com/advisories/malware/GHSA-7jgm-3pcc-h7cv GHSA-7jgm-3pcc-h7cv malware advisory: critical-sev… | Corgea GHSA-7jgm-3pcc-h7cv is a critical-severity malicious package advisory. Affects RubyGems/zzpdfvar01. Malicious code in zzpdfvar01 (RubyGems). ghsamalwareadvisorycritical https://www.sitestream.ai/news-resources/ghsa-consortium-automated-enforcement-checklist GHSA Consortium Creates Automated Enforcement Checklist — Sitestream Red light and speed cameras are powerful enforcement tools that have been shown to reduce crashes, but programs must be carefully implemented. ghsa consortiumcreatesautomatedenforcementchecklist https://cve.circl.lu/vuln/ghsa-8f66-6ff4-3fj6 GHSA-8F66-6FF4-3FJ6 - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup https://developpeur-full-stack.fr/securite/ghsa-3v8f-m5rm-8mv3-snap-queue-execute-du-code-pendant-linstallation-pypi/ GHSA-3v8f-m5rm-8mv3 : snap-queue exécute du code pendant l’installation PyPI -... Sep 24, 2026 - P3 · Élevée — Le paquet PyPI snap-queue est classé malveillant pour une surcharge de la commande d’installation visant à exécuter du code silencieusement. ghsasnapqueuecodependant https://corgea.com/advisories/malware/GHSA-5rqj-744v-8r8c GHSA-5rqj-744v-8r8c malware advisory: critical-sev… | Corgea GHSA-5rqj-744v-8r8c is a critical-severity malicious package advisory. Affects RubyGems/chalk_rake. Malicious code in chalk_rake (RubyGems). ghsamalwareadvisorycritical https://ninjasignal.ninja/intel/cve/GHSA-jq4x-98m3-ggq6 GHSA-jq4x-98m3-ggq6 — Ninja Signal Threat Intelligence | Ninja Signal ZDI-CAN-29312: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day In threat intelligenceghsaninjasignal https://ninjasignal.ninja/intel/cve/GHSA-prxj-3gcv-cqrh GHSA-prxj-3gcv-cqrh (CVSS 5.9) — Ninja Signal Threat Intelligence | Ninja Signal ### Summary A vulnerability in vehicle authentication allows threat actor with valid client credentials (i.e., a private key and certificate from a rooted info threat intelligenceghsacvssninjasignal https://www.healthreporterfrenchpolynesia.com/article/897268716-ghsa-buspatrol-release-national-action-plan-for-school-bus-safety GHSA, BusPatrol Release National Action Plan for School Bus Safety | Health Reporter French... national action planfor schoolghsareleasebus https://exploitdog.ru/cve/github/GHSA-w8qr-v226-r27w Уязвимость GHSA-w8qr-v226-r27w Filter bypass in filter_var (FILTER_VALIDATE_URL). ### Summary An early-return in filter_var (FILTER_VALIDATE_URL) will result in invalid user information (us… ghsa https://research.averlon.ai/vulnerability-intelligence/cve/GHSA-xw77-45gv-p728 GHSA-xw77-45gv-p728: OpenClaw: Plugin subagent routes could bypass gateway authorization with... ## Summary In affected versions of `openclaw`, the plugin subagent runtime dispatched gateway methods through a synthetic operator client that always carried... ghsaopenclawpluginsubagentroutes https://corgea.com/advisories/malware/GHSA-2g4f-j3vj-2xj6 GHSA-2g4f-j3vj-2xj6 malware advisory: critical-sev… | Corgea GHSA-2g4f-j3vj-2xj6 is a critical-severity malicious package advisory. Affects RubyGems/tryc4bzz. Malicious code in tryc4bzz (RubyGems) Review affected. ghsamalwareadvisorycritical https://corgea.com/advisories/malware/GHSA-3cjq-q62g-3hf2 GHSA-3cjq-q62g-3hf2 malware advisory: critical-sev… | Corgea GHSA-3cjq-q62g-3hf2 is a critical-severity malicious package advisory. Affects npm/lint-builds. Malicious code in lint-builds (npm) Review affected versions. ghsamalwareadvisorycritical https://corgea.com/advisories/malware/GHSA-2fwh-57f2-c244 GHSA-2fwh-57f2-c244 malware advisory: critical-sev… | Corgea GHSA-2fwh-57f2-c244 is a critical-severity malicious package advisory. Affects RubyGems/aiznuarbhczr. Malicious code in aiznuarbhczr (RubyGems). ghsamalwareadvisorycritical https://corgea.com/advisories/malware/GHSA-6mcr-wpv6-2h66 GHSA-6mcr-wpv6-2h66 malware advisory: critical-sev… | Corgea GHSA-6mcr-wpv6-2h66 is a critical-severity malicious package advisory. Affects RubyGems/fossa-curl-test. Malicious code in fossa-curl-test (RubyGems). ghsamalwareadvisorycritical https://www.ajc.com/sports/high-school-sports-blog/list-longest-home-winning-streaks-in-ghsa-history/YQ7RC4EAVFF3PMBJMSAJE5MHXQ/ List: Longest home winning streaks in GHSA history winning streakslistlongestghsahistory https://db.gcve.eu/vuln/ghsa-qphx-26ch-3x8j GHSA-QPHX-26CH-3X8J - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup https://www.ajc.com/sports/2025/12/2-defending-champions-return-to-mbs-2a-and-3a-a-private-state-title-preview/ GHSA football championship game previews for classes 2A and 3A-A Private See matchup details and projections as Carver (Columbus) and Hebron Christian return to Mercedes-Benz Stadium to defend their GHSA titles. football championshipgame previewsghsaclassesprivate https://vdb.ai.kr/vuln/GHSA-9q9j-q6p8-xq58 GHSA-9q9j-q6p8-xq58 — fastify vulnerable to header validation bypass via incompl · VDB fastify vulnerable to header validation bypass via incomplete schema case normalization ghsafastifyvulnerableheadervalidation https://corgea.com/advisories/malware/GHSA-8hf8-x6gf-rpvq GHSA-8hf8-x6gf-rpvq malware advisory: critical-sev… | Corgea GHSA-8hf8-x6gf-rpvq is a critical-severity malicious package advisory. Affects RubyGems/chatoaitestbzr1778552654. Malicious code in chatoaitestbzr1778552654. ghsarpvqmalwareadvisorycritical https://www.bartowsportszone.com/blog/tags/ghsa/page/4 GHSA | bartowsportszone 4/27 ghsa https://www.ghsa.net/2018-2019-ghsa-class-aaaaaaa-boys-state-tennis-championship-bracket 2018-2019 GHSA Class AAAAAAA Boys State Tennis Championship | GHSA.net boys statetennis championshipghsaclass https://ninjasignal.ninja/intel/cve/GHSA-mw7w-g3mg-xqm7 GHSA-mw7w-g3mg-xqm7 — Ninja Signal Threat Intelligence | Ninja Signal ## Summary BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events ## Affected Packages / Versions - Package: `opencl threat intelligenceghsaninjasignal https://exploitdog.ru/cve/github/GHSA-f66h-84rm-53q7 Уязвимость GHSA-f66h-84rm-53q7 pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attacker… ghsa https://www.ghsa.net/schedule-ranking-view/football/rankings/313 2026 GHSA Football Schedule - Explain Ranking - South Effingham | GHSA.net south effinghamghsafootballscheduleexplain https://exploitdog.ru/cve/github/GHSA-fq4g-jqvq-wx5r Уязвимость GHSA-fq4g-jqvq-wx5r The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions u… ghsa https://www.ghsa.net/all-stories/4?page=3 Cross Country | GHSA.net cross countryghsa https://corgea.com/advisories/malware/GHSA-38wj-f54r-v73w GHSA-38wj-f54r-v73w malware advisory: critical-sev… | Corgea GHSA-38wj-f54r-v73w is a critical-severity malicious package advisory. Affects RubyGems/area-code_validator. Malicious code in area-code_validator (RubyGems). ghsamalwareadvisorycritical https://exploitdog.ru/cve/github/GHSA-f75f-9mxv-wjhq Уязвимость GHSA-f75f-9mxv-wjhq In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the… ghsa https://corgea.com/advisories/malware/GHSA-64h9-56m7-9wmf GHSA-64h9-56m7-9wmf malware advisory: critical-sev… | Corgea GHSA-64h9-56m7-9wmf is a critical-severity malicious package advisory. Affects npm/wazir-xlocaletstnpm. Malicious code in wazir-xlocaletstnpm (npm). ghsamalwareadvisorycritical https://security.cyberus-linux.com/vulnerability/GHSA-4jv7-q6xw-6f4x/ GHSA-4jv7-q6xw-6f4x - Cyberus Linux Security Tracker Browse security vulnerabilities and events for each Cyberus Linux release. ghsalinuxsecuritytracker https://exploitdog.ru/cve/github/GHSA-fxr7-gmm5-h533 Уязвимость GHSA-fxr7-gmm5-h533 Rejected reason: This CVE ID has been rejected.. Rejected reason: This CVE ID has been rejected. ghsa https://exploitdog.ru/cve/github/GHSA-fm3h-q54v-rjrj Уязвимость GHSA-fm3h-q54v-rjrj Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.. Deserialization of untrusted data in Azur… ghsa https://vdb.ai.kr/vuln/PYSEC-2026-4013 GHSA-p58f-9548-mpm2 — virtualenv bash and fish activation scripts execute comman · VDB virtualenv bash and fish activation scripts execute commands embedded in paths ghsabashfishactivationscripts https://www.apiposture.com/remediation/go-gin/how-to-fix-ssrf-in-go-gin-ghsa-fmqp-4wfc-w3v7/ SSRF in Go (Gin) remediation [Apr 2026] [GHSA-fmqp-4wfc-w3v7] | ApiPosture Remediation guide for SSRF in Go (Gin): user-supplied URLs enabling access to internal resources (169.254.169.254) metadata. Add timeouts and validation. ssrfginremediationaprghsa https://ghsa.teamip.com/HSA_GHSA_en_US/18500-2025-ghsa-s-c-g-d2-b-navy.html 2025 GHSA Girls Soccer State Champions D2 8 oz., 50% USA cotton, 50% polyester girls soccerghsastatechampions https://corgea.com/advisories/malware/GHSA-273v-8528-2qfv GHSA-273v-8528-2qfv malware advisory: critical-sev… | Corgea GHSA-273v-8528-2qfv is a critical-severity malicious package advisory. Affects npm/ingularjs. Malicious code in ingularjs (npm) Review affected versions. ghsamalwareadvisorycritical https://security.cyberus-linux.com/finding/3013/ GHSA-wfx7-g85r-q6vw on Cyberus Linux 26.05 - Cyberus Linux Security Tracker Browse security vulnerabilities and events for each Cyberus Linux release. ghsalinuxsecuritytracker https://cvereports.com/reports/GHSA-59FH-9F3P-7M39 GHSA-59FH-9F3P-7M39: GHSA-59FH-9F3P-7M39: Mass Assignment in Flowise Profile Update Endpoint |... May 20, 2026 - Daily high-severity CVE reports defined by AI. Comprehensive vulnerability analysis, attack flow diagrams, and remediation steps for security professionals. mass assignmentprofile updateghsaendpoint https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-ZIPKIN-19007071 GHSA-5m9f-rphj-c435 in zipkin | Snyk GHSA-5m9f-rphj-c435 in zipkin ghsazipkinsnyk https://www.thewinningshots.com/p337105129 Zenfolio | TheWinningShots.com - Sports Photography | North Gwinnett vs Brookwood (GHSA Playoffs... TheWinningShots.com - Sports Photography sports photographyzenfolionorthgwinnettbrookwood https://advisories.gitlab.com/pkg/cargo/aws-sdk-dataexchange/GHSA-g59m-gf8j-gjf5/ https://advisories.gitlab.com/cargo/aws-sdk-dataexchange/GHSA-g59m-gf8j-gjf5/ httpsadvisoriesgitlabcargoaws https://parseforge.co/a/github-security-advisories-scraper/ GitHub Security Advisories Scraper - GHSA, CVE & CWE Data Scrape GitHub Security Advisories by GHSA ID, CVE, ecosystem, severity, or date. Export to CSV, JSON, Excel, XML. No API key needed. github security advisoriesscraperghsacvecwe https://corgea.com/advisories/malware/GHSA-5c62-vwm9-mx94 GHSA-5c62-vwm9-mx94 malware advisory: critical-sev… | Corgea GHSA-5c62-vwm9-mx94 is a critical-severity malicious package advisory. Affects RubyGems/bottestjanmid19d53. Malicious code in bottestjanmid19d53 (RubyGems). ghsamalwareadvisorycritical https://sandysspiel.com/2024-25-ghsa-girls-preseason-all-state-teams/ 2024-25 GHSA Girls Preseason All-State Teams | Sandy's Spiel Mar 4, 2025 - 2024-25 GHSA Girls Basketball Preseason All-State Teams. all stateghsagirlspreseasonteams https://totoro-niisan.com/dell-dc15250/ Dell ノートパソコン Dell 15 DC15250 15.6インチ Intel Core i5-1334U メモリ16GB SSD512GB Windows 11 ND65-GHSA と... Jun 26, 2026 - Dell ノートパソコン「Dell 15 DC15250(ND65-GHSA・ND65-GHM3SA)」を初心者向けに徹底解説。第13世代Core i5-1334U・16GBメモリ・512GB... intel coredellwindowsghsa https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TELEGRAF138-18310276 GHSA-jpjm-c3r5-q96r in telegraf-1.38 | Snyk GHSA-jpjm-c3r5-q96r in telegraf-1.38 ghsatelegrafsnyk https://www.apiposture.com/remediation/laravel/how-to-fix-broken-authentication-in-laravel-ghsa-349c-2h2f-mxf6/ Broken Authentication in Laravel naturally [April 2026] [GHSA-349c-2h2f-mxf6] | ApiPosture Remediation guide for Broken Authentication in Laravel. Covers secure cookies, remember-me usage, token rotation, and Sanctum/Passport patterns for teams. brokenauthenticationlaravelnaturallyapril https://www.ghsa.net/schedule-ranking-view/football/rankings/302 2026 GHSA Football Schedule - Explain Ranking - Irwin County | GHSA.net irwin countyghsafootballscheduleexplain https://security.cyberus-linux.com/vulnerability/GHSA-gg3m-4m9m-268h/ GHSA-gg3m-4m9m-268h - Cyberus Linux Security Tracker Browse security vulnerabilities and events for each Cyberus Linux release. ghsalinuxsecuritytracker https://ninjasignal.ninja/intel/cve/GHSA-pr6h-vr44-xq8j GHSA-pr6h-vr44-xq8j (CVSS 5.3) — Ninja Signal Threat Intelligence | Ninja Signal ## Summary In affected versions, enabling registry authentication (`OBOT_SERVER_ENABLE_REGISTRY_AUTH=true`) does not actually protect the MCP Registry endpoint threat intelligenceghsacvssninjasignal https://ninjasignal.ninja/intel/cve/GHSA-j5w5-568x-rq53 GHSA-j5w5-568x-rq53 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal ### Summary A command injection vulnerability in the `_extractLLM()` function allows attackers to execute arbitrary shell commands on the server. The function c threat intelligenceghsacvssninjasignal https://advisories.gitlab.com/pkg/nuget/magick.net-q16-hdri-x64/GHSA-3j4x-rwrx-xxj9/ https://advisories.gitlab.com/nuget/magick.net-q16-hdri-x64/GHSA-3j4x-rwrx-xxj9/ httpsadvisoriesgitlabnugetmagick https://corgea.com/advisories/malware/GHSA-3gfx-qqj3-vg77 GHSA-3gfx-qqj3-vg77 malware advisory: critical-sev… | Corgea GHSA-3gfx-qqj3-vg77 is a critical-severity malicious package advisory. Affects RubyGems/newhackgit1778555882. Malicious code in newhackgit1778555882 (RubyGems). ghsamalwareadvisorycritical https://ninjasignal.ninja/intel/cve/GHSA-wx9m-wx4f-4cmg GHSA-wx9m-wx4f-4cmg (CVSS 9.6) — Ninja Signal Threat Intelligence | Ninja Signal The `mistralai` PyPI package version `2.4.6` contains a malicious dropper that executes on import on Linux. No `v2.4.6` tag, commit, or release workflow run exi threat intelligenceghsacvssninjasignal https://advisories.gitlab.com/pkg/cargo/parsec-service/GHSA-45w3-v3g4-54pm/ https://advisories.gitlab.com/cargo/parsec-service/GHSA-45w3-v3g4-54pm/ httpsadvisoriesgitlabcargoparsec https://advisories.gitlab.com/pkg/pypi/fiona/GHSA-q5fm-55c2-v6j9/ https://advisories.gitlab.com/pypi/fiona/GHSA-q5fm-55c2-v6j9/ httpsadvisoriesgitlabpypifiona https://exploitdog.ru/cve/github/GHSA-x2j9-6g95-5p2v Уязвимость GHSA-x2j9-6g95-5p2v The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the… ghsa https://vdb.ai.kr/vuln/GHSA-xw5h-cmh3-8j6j GHSA-xw5h-cmh3-8j6j — Apache CXF has Improper Restriction of XML External Entity · VDB Apache CXF has Improper Restriction of XML External Entity Reference xml external entityapache cxfghsaimproperrestriction https://www.ghsa.net/pam-thompson Pam Thompson | GHSA.net pam thompsonghsa https://mondoo.com/vulnerability-intelligence/vulnerability/GHSA-j8gr-8fp3-5q5h GHSA-j8gr-8fp3-5q5h | Mondoo Vulnerability Intelligence GHSA-j8gr-8fp3-5q5h - HIGH severity: Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability ghsavulnerabilityintelligence https://corgea.com/advisories/malware/GHSA-2wfx-g2fh-rh7f GHSA-2wfx-g2fh-rh7f malware advisory: critical-sev… | Corgea GHSA-2wfx-g2fh-rh7f is a critical-severity malicious package advisory. Affects npm/@or-sdk/invitations. Malicious code in @or-sdk/invitations (npm). ghsamalwareadvisorycritical https://radar.offseq.com/threats?tag=ghsa-f34q-f47h-v25c Threats Tagged 'ghsa-f34q-f47h-v25c' | Threat Radar Cyber threats tagged with 'ghsa-f34q-f47h-v25c'. View detailed information about related vulnerabilities, malware, and attack campaigns. threatstaggedghsaradar https://www.ghsa.net/ghsa-traditional-wrestling-state-championship GHSA Traditional Wrestling State Championships | GHSA.net traditional wrestlingstate championshipsghsa https://www.ghsa.net/all-stories/15 Tennis | GHSA.net tennisghsa https://www.ghsa.net/deadline-notification-entry-gymnastics-2020-03-31 Deadline for Notification of Entry in Gymnastics | GHSA.net deadlinenotificationentrygymnasticsghsa https://www.ghsa.net/state-swimming-and-diving-meets-2018-02-01-000000-2018-02-03-000000 State Swimming and Diving Meets | GHSA.net stateswimmingdivingmeetsghsa https://www.fifthregionofficials.com/georgia-ghsa-navy-4-stitch-pulse-flex-fit-umpire-cap/ Georgia GHSA Navy 4-stitch Pulse Flex-fit Umpire Cap Pulse Flex-fit 4-stitch cap. Georgia GHSA logo embroidered on the front. S/M or L/X. georgiaghsanavystitchpulse https://hextrap.io/tools/am-i-vulnerable/ Am I Vulnerable? CVE/GHSA Lockfile Checker - Hextrap Check whether a CVE or GitHub Security Advisory (GHSA) affects your project. Paste a requirements.txt, uv.lock, package-lock.json, Cargo.lock, or go.mod and... vulnerablecveghsalockfilechecker https://db.gcve.eu/vuln/ghsa-qj4p-48x3-w6gm GHSA-QJ4P-48X3-W6GM - Vulnerability-Lookup Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. ghsavulnerabilitylookup