Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
GHSA-mhf7-xp6r-6qrc - Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:51
livewire
Source ↗
MEDIUM
GHSA-h53f-rm2w-w7rg - Echo: X-Real-IP extractor trusts the header value instead of the sending peer
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:50
github
Source ↗
HIGH
GHSA-9969-6676-49h5 - Echo: WebSocket proxy can retain connections and handlers after client disconnect
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:50
github
Source ↗
HIGH
GHSA-h7wr-284f-5qvc - Echo: Decompress permits unbounded gzip expansion in v4
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:49
github
Source ↗
CRITICAL
GHSA-cxf3-9h37-7rr8 - Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:49
github
Source ↗
MEDIUM
GHSA-x9ff-22gv-65f4 - Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:49
github
Source ↗
HIGH
GHSA-f48p-c9v4-h7xv - Echo: BodyDump captures request and response bodies without size limits in v4
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T20:48
github
Source ↗
HIGH
GHSA-4v6f-7vjh-6x4m - Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
NEAR-REAL-TIME
CVE-2026-115419 · GitHub Security Advisories · published 2026-10-23T20:48 · correlated from 2 sources
strands-agents@strands-agents
Source ↗
HIGH
GHSA-cx6f-vjhg-g3cc - virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
NEAR-REAL-TIME
CVE-2026-115586 · GitHub Security Advisories · published 2026-10-23T20:47 · correlated from 3 sources
virtualenvRed Hat
Source ↗
MEDIUM
GHSA-2qrf-pqgx-qh9v - Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
NEAR-REAL-TIME
CVE-2026-115774 · GitHub Security Advisories · published 2026-10-23T20:46 · correlated from 3 sources
TwistedRed Hat
Source ↗
HIGH
GHSA-53xc-49m8-p798 - Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
NEAR-REAL-TIME
CVE-2026-115776 · GitHub Security Advisories · published 2026-10-23T20:45 · correlated from 3 sources
TwistedRed Hat
Source ↗
HIGH
GHSA-cwm5-jh59-mwxr - Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
NEAR-REAL-TIME
CVE-2026-115778 · GitHub Security Advisories · published 2026-10-23T20:45 · correlated from 3 sources
TwistedRed Hat
Source ↗
HIGH
GHSA-3476-c5c2-fr73 - Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
NEAR-REAL-TIME
CVE-2026-115775 · GitHub Security Advisories · published 2026-10-23T20:45 · correlated from 3 sources
TwistedRed Hat
Source ↗
MEDIUM
GHSA-q7qq-6mhp-9rc4 - Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
NEAR-REAL-TIME
CVE-2026-115877 · GitHub Security Advisories · published 2026-10-23T20:44 · correlated from 3 sources
TwistedRed Hat
Source ↗
MEDIUM
GHSA-27mw-82g8-phjj - SvelteKit : XSS via untrusted cache-control header in prerendered page
NEAR-REAL-TIME
CVE-2026-114061 · GitHub Security Advisories · published 2026-10-23T20:43 · correlated from 2 sources
@sveltejs
Source ↗
LOW
CVE-2026-83813 - twisted: twisted: DNS spoofing via missing response source verification
NEAR-REAL-TIME
CVE-2026-83813 · Red Hat - CVE Feed · published 2026-10-23T20:21 · correlated from 3 sources
Red HatTwisted
Source ↗
HIGH
CVE-2026-79982 - The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every c
NEAR-REAL-TIME
CVE-2026-79982 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
MEDIUM
CVE-2026-79981 - The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver conte
NEAR-REAL-TIME
CVE-2026-79981 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
aws
Source ↗
MEDIUM
CVE-2026-79980 - The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as
NEAR-REAL-TIME
CVE-2026-79980 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
aws
Source ↗
HIGH
CVE-2026-79979 - The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mm
NEAR-REAL-TIME
CVE-2026-79979 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗