Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
LOW
GHSA-xmj3-9gf7-h52w - setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T21:44
setuptools
Source ↗
MEDIUM
GHSA-7xgj-8392-5q4r - FastMCP: Post-transform component authorization is skipped on direct calls
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T21:32
fastmcpfastmcp-slim
Source ↗
MEDIUM
GHSA-vqqp-x5qm-5qp4 - FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T21:31
fastmcpfastmcp-slim
Source ↗
MEDIUM
CVE-2026-75525 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions
NEAR-REAL-TIME
CVE-2026-75525 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
MEDIUM
CVE-2026-75524 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
NEAR-REAL-TIME
CVE-2026-75524 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
HIGH
CVE-2026-65825 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions
NEAR-REAL-TIME
CVE-2026-65825 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
HIGH
CVE-2026-65824 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
NEAR-REAL-TIME
CVE-2026-65824 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
HIGH
CVE-2026-58202 - OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
NEAR-REAL-TIME
CVE-2026-58202 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
INFORMATIONAL
CVE-2026-57849 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-57849 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
MEDIUM
CVE-2026-115800 - A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model o
NEAR-REAL-TIME
CVE-2026-115800 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
INFORMATIONAL
CVE-2026-113951 - If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugi
NEAR-REAL-TIME
CVE-2026-113951 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
linux
Source ↗
INFORMATIONAL
CVE-2026-113877 - HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regul
NEAR-REAL-TIME
CVE-2026-113877 · NIST NVD - National Vulnerability Database · published 2026-10-23T21:17
Source ↗
MEDIUM
GHSA-pfhg-q3qv-9q6r - SvelteKit: URL redirection to untrusted site via enhanced form submission
NEAR-REAL-TIME
CVE-2026-114060 · GitHub Security Advisories · published 2026-10-23T20:58 · correlated from 2 sources
@sveltejs
Source ↗
MEDIUM
GHSA-2rqm-h6hv-g79v - odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:55
odf-kit
Source ↗
HIGH
GHSA-6c7f-9265-g8fw - pypdf: Possible long runtimes for repeated references to the same missing object
NEAR-REAL-TIME
CVE-2026-115572 · GitHub Security Advisories · published 2026-10-23T20:55 · correlated from 3 sources
pypdfRed Hat
Source ↗
HIGH
GHSA-jr96-gvgh-j3r4 - pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
NEAR-REAL-TIME
CVE-2026-115585 · GitHub Security Advisories · published 2026-10-23T20:54 · correlated from 3 sources
pypdfRed Hat
Source ↗
HIGH
GHSA-gmh7-3g9r-mjh5 - pypdf: Possible long runtimes for large xref table header limits
NEAR-REAL-TIME
CVE-2026-115580 · GitHub Security Advisories · published 2026-10-23T20:54 · correlated from 3 sources
pypdfRed Hat
Source ↗
MEDIUM
GHSA-5wjr-9356-4wc8 - Tokio: Race condition in `tokio::time::Interval`
NEAR-REAL-TIME
CVE-2026-115567 · GitHub Security Advisories · published 2026-10-23T20:54 · correlated from 2 sources
tokio
Source ↗
HIGH
GHSA-jr5w-w6x2-84p9 - Electron: Mitigation for compromised eMudhra intermediate certificates
NEAR-REAL-TIME
CVE-2026-115570 · GitHub Security Advisories · published 2026-10-23T20:53 · correlated from 2 sources
electron
Source ↗
HIGH
GHSA-q54r-jf2p-rfr2 - gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:52
gix
Source ↗