Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
GHSA-x397-5hrv-j9m9 - Cachet has Stored XSS in Incident Component
NEAR-REAL-TIME
CVE-2026-113712 · GitHub Security Advisories · published 2026-10-20T21:09
cachethq
Source ↗
MEDIUM
GHSA-x32g-jvvm-4725 - A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure
NEAR-REAL-TIME
CVE-2026-111762 · GitHub Security Advisories · published 2026-10-20T21:08
org.a2aproject.sdk:a2a-java-sdk-transport-rest
Source ↗
HIGH
GHSA-4fpj-g9jf-9rgg - A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
NEAR-REAL-TIME
CVE-2026-111765 · GitHub Security Advisories · published 2026-10-20T21:08
org.a2aproject.sdk:a2a-java-sdk-http-client-android
Source ↗
MEDIUM
GHSA-q78c-5jjq-57g8 - A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery
NEAR-REAL-TIME
CVE-2026-111761 · GitHub Security Advisories · published 2026-10-20T21:06
org.a2aproject.sdk:a2a-java-sdk-server-common
Source ↗
HIGH
GHSA-qw47-mcm5-934w - A2A Java SDK has a fail-open default task authorization
NEAR-REAL-TIME
CVE-2026-111764 · GitHub Security Advisories · published 2026-10-20T21:05
org.a2aproject.sdk:a2a-java-sdk-server-common
Source ↗
MEDIUM
GHSA-9rhm-2h4x-jwmx - A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect
NEAR-REAL-TIME
CVE-2026-111763 · GitHub Security Advisories · published 2026-10-20T21:04
org.a2aproject.sdk:a2a-java-sdk-parent
Source ↗
HIGH
CVE-2026-113314 - chromium-browser: chromium-browser: Use after free in Media
NEAR-REAL-TIME
CVE-2026-113314 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
HIGH
CVE-2026-113256 - chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page
NEAR-REAL-TIME
CVE-2026-113256 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
HIGH
CVE-2026-113091 - chromium-browser: chromium-browser: Use after free in PerformanceAPIs
NEAR-REAL-TIME
CVE-2026-113091 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
MEDIUM
CVE-2026-113050 - chromium-browser: chromium-browser: Out of bounds read in HID
NEAR-REAL-TIME
CVE-2026-113050 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
HIGH
CVE-2026-113203 - chromium-browser: chromium-browser: arbitrary code execution via use-after-free in CSS
NEAR-REAL-TIME
CVE-2026-113203 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
HIGH
CVE-2026-113041 - chromium-browser: chromium-browser: Arbitrary code execution inside sandbox via crafted HTML page
NEAR-REAL-TIME
CVE-2026-113041 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
HIGH
CVE-2026-113105 - chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page
NEAR-REAL-TIME
CVE-2026-113105 · Red Hat - CVE Feed · published 2026-10-20T21:02
Red Hat
Source ↗
MEDIUM
CVE-2026-113310 - chromium-browser: chromium-browser: Information disclosure in Bluetooth via crafted HTML page
NEAR-REAL-TIME
CVE-2026-113310 · Red Hat - CVE Feed · published 2026-10-20T21:01
Red Hat
Source ↗
HIGH
CVE-2026-113339 - chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in SVG
NEAR-REAL-TIME
CVE-2026-113339 · Red Hat - CVE Feed · published 2026-10-20T21:01
Red Hat
Source ↗
MEDIUM
GHSA-vx6w-vv9f-6gvg - Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
NEAR-REAL-TIME
CVE-2026-112899 · GitHub Security Advisories · published 2026-10-20T20:53
Pillow
Source ↗
CRITICAL
GHSA-8g5g-8vmr-9782 - Pillow: Heap buffer overflow in ImagingJpegDecode
NEAR-REAL-TIME
CVE-2026-112403 · GitHub Security Advisories · published 2026-10-20T20:40
Pillow
Source ↗
MEDIUM
GHSA-jfgx-762w-99vr - @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
NEAR-REAL-TIME
CVE-2026-111753 · GitHub Security Advisories · published 2026-10-20T20:37
@angular
Source ↗
CRITICAL
2026-018: Critical Vulnerabilities in PHP
NEAR-REAL-TIME
CERT-EU - Security Advisories · published 2026-10-20T20:36
EU
Source ↗
HIGH
GHSA-gfr2-rv44-r23c - markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
NEAR-REAL-TIME
CVE-2026-111758 · GitHub Security Advisories · published 2026-10-20T20:28 · correlated from 2 sources
markdown-itRed Hat
Source ↗