Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
GHSA-jm63-cq47-j5jp - MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
NEAR-REAL-TIME
CVE-2026-111770 · GitHub Security Advisories · published 2026-10-20T20:07
@modelcontextprotocol
Source ↗
HIGH
GHSA-46jr-4wx8-v453 - MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
NEAR-REAL-TIME
CVE-2026-111768 · GitHub Security Advisories · published 2026-10-20T20:06
@modelcontextprotocol
Source ↗
HIGH
CVE-2026-113725 - virtualenv: virtualenv: arbitrary code execution via crafted environment name
NEAR-REAL-TIME
CVE-2026-113725 · Red Hat - CVE Feed · published 2026-10-20T19:56
Red Hat
Source ↗
MEDIUM
CVE-2026-113724 - virtualenv: virtualenv: Insecure file permission modification via symlink following
NEAR-REAL-TIME
CVE-2026-113724 · Red Hat - CVE Feed · published 2026-10-20T19:53
Red Hat
Source ↗
MEDIUM
GHSA-r825-w8mm-5pxw - launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
NEAR-REAL-TIME
CVE-2026-112944 · GitHub Security Advisories · published 2026-10-20T19:51 · correlated from 2 sources
launch-editorvitevite-plusRed Hat
Source ↗
HIGH
CVE-2026-113723 - virtualenv: virtualenv: Arbitrary code execution via malicious prompt text
NEAR-REAL-TIME
CVE-2026-113723 · Red Hat - CVE Feed · published 2026-10-20T19:51
Red Hat
Source ↗
HIGH
CVE-2026-113722 - virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers
NEAR-REAL-TIME
CVE-2026-113722 · Red Hat - CVE Feed · published 2026-10-20T19:48
Red Hat
Source ↗
HIGH
GHSA-587h-7wmj-h5pm - launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
NEAR-REAL-TIME
CVE-2026-112942 · GitHub Security Advisories · published 2026-10-20T19:48 · correlated from 2 sources
launch-editorvitevite-plusRed Hat
Source ↗
MEDIUM
CVE-2026-113721 - virtualenv: virtualenv: Arbitrary file overwrite via insecure symlink handling
NEAR-REAL-TIME
CVE-2026-113721 · Red Hat - CVE Feed · published 2026-10-20T19:46
Red Hat
Source ↗
MEDIUM
GHSA-rvq5-wwqv-78pq - MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
NEAR-REAL-TIME
CVE-2026-111771 · GitHub Security Advisories · published 2026-10-20T19:43
@modelcontextprotocol
Source ↗
MEDIUM
CVE-2026-113720 - virtualenv: virtualenv: Arbitrary code execution via insecure cached file permissions
NEAR-REAL-TIME
CVE-2026-113720 · Red Hat - CVE Feed · published 2026-10-20T19:43
Red Hat
Source ↗
MEDIUM
CVE-2026-113715 - virtualenv: virtualenv: Environment isolation bypass via crafted destination path
NEAR-REAL-TIME
CVE-2026-113715 · Red Hat - CVE Feed · published 2026-10-20T19:42
Red Hat
Source ↗
MEDIUM
CVE-2026-113719 - virtualenv: virtualenv: Arbitrary file deletion via path traversal in package metadata
NEAR-REAL-TIME
CVE-2026-113719 · Red Hat - CVE Feed · published 2026-10-20T19:42
Red Hat
Source ↗
MEDIUM
CVE-2026-113718 - virtualenv: virtualenv: arbitrary code execution via improper quoting in xonsh activation scripts
NEAR-REAL-TIME
CVE-2026-113718 · Red Hat - CVE Feed · published 2026-10-20T19:39
Red Hat
Source ↗
CRITICAL
GHSA-hq85-5cpj-mr62 - uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-20T19:37
uv
Source ↗
CRITICAL
GHSA-6q48-6c7w-9gw2 - certifi bundles emSign root CAs with compromised intermediate CA keys
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-20T19:35
certifi
Source ↗
MEDIUM
CVE-2026-113717 - virtualenv: virtualenv: Integrity verification bypass via pip seeder download option
NEAR-REAL-TIME
CVE-2026-113717 · Red Hat - CVE Feed · published 2026-10-20T19:22
Red Hat
Source ↗
MEDIUM
CVE-2026-113716 - virtualenv: virtualenv: Unauthorized file write via symlink following
NEAR-REAL-TIME
CVE-2026-113716 · Red Hat - CVE Feed · published 2026-10-20T19:18
Red Hat
Source ↗
MEDIUM
CVE-2026-113868 - thunderbird: Thunderbird: information disclosure via malformed authentication challenge
NEAR-REAL-TIME
CVE-2026-113868 · Red Hat - CVE Feed · published 2026-10-20T19:14
Red Hat
Source ↗
HIGH
CVE-2026-113869 - thunderbird: thunderbird: Use-after-free via S/MIME decryption password prompt
NEAR-REAL-TIME
CVE-2026-113869 · Red Hat - CVE Feed · published 2026-10-20T19:14
Red Hat
Source ↗