Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
GHSA-527g-ff96-x6wj - ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF
NEAR-REAL-TIME
CVE-2026-113671 · GitHub Security Advisories · published 2026-10-20T18:11
@apostrophecms
Source ↗
HIGH
GHSA-qhcq-9pm2-c9w9 - ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory
NEAR-REAL-TIME
CVE-2026-113658 · GitHub Security Advisories · published 2026-10-20T18:10
apostrophe
Source ↗
MEDIUM
GHSA-hhvr-8m24-qqr3 - ApostropheCMS: Cross-domain session token in URL confers session takeover
NEAR-REAL-TIME
CVE-2026-113669 · GitHub Security Advisories · published 2026-10-20T18:09
apostrophe@apostrophecms
Source ↗
MEDIUM
GHSA-89mh-mm8c-mv7f - ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS
NEAR-REAL-TIME
CVE-2026-113656 · GitHub Security Advisories · published 2026-10-20T18:08
@apostrophecms
Source ↗
MEDIUM
GHSA-44qr-rrjg-2cqq - ApostropheCMS: CAPTCHA response token not URL-encoded
NEAR-REAL-TIME
CVE-2026-113667 · GitHub Security Advisories · published 2026-10-20T18:05
@apostrophecms
Source ↗
MEDIUM
GHSA-2jrp-qc93-h2j8 - ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization
NEAR-REAL-TIME
CVE-2026-113655 · GitHub Security Advisories · published 2026-10-20T18:04
apostrophe
Source ↗
HIGH
GHSA-j5rq-xfvr-p969 - ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service
NEAR-REAL-TIME
CVE-2026-113666 · GitHub Security Advisories · published 2026-10-20T18:03
@apostrophecmsapostrophe
Source ↗
MEDIUM
GHSA-x3q4-9hxx-gx8m - ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
NEAR-REAL-TIME
CVE-2026-113654 · GitHub Security Advisories · published 2026-10-20T18:03 · correlated from 2 sources
sanitize-htmlRed Hat
Source ↗
HIGH
GHSA-q3jh-wrc6-jgq8 - follow-redirects array-form headers bypass cross-origin credential stripping
NEAR-REAL-TIME
CVE-2026-111756 · GitHub Security Advisories · published 2026-10-20T17:58 · correlated from 2 sources
follow-redirectsRed Hat
Source ↗
HIGH
GHSA-57xq-rjx2-v5xh - @angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
NEAR-REAL-TIME
CVE-2026-111751 · GitHub Security Advisories · published 2026-10-20T17:52
@angular
Source ↗
MEDIUM
CVE-2026-92539 - grafana: Grafana: Unauthorized cross-organization user management via the SCIM API
NEAR-REAL-TIME
CVE-2026-92539 · Red Hat - CVE Feed · published 2026-10-20T16:55
Red Hat
Source ↗
CRITICAL
WAGO OS Linux
NEAR-REAL-TIME
CVE-2026-80466 · CISA - Cybersecurity Advisories · published 2026-10-20T16:25
Source ↗
CRITICAL
HMS Networks PEAK-System PCAN Windows drivers
NEAR-REAL-TIME
CVE-2026-109576 · CISA - Cybersecurity Advisories · published 2026-10-20T16:25
Source ↗
MEDIUM
CVE-2026-113650 - sanitize-html: sanitize-html: Denial of Service via unbounded recursion in iframe tag processing
NEAR-REAL-TIME
CVE-2026-113650 · Red Hat - CVE Feed · published 2026-10-20T16:19
Red Hat
Source ↗
MEDIUM
CVE-2026-113680 - harfbuzz: harfbuzz: Denial of Service via crafted font in WebAssembly shaper
NEAR-REAL-TIME
CVE-2026-113680 · Red Hat - CVE Feed · published 2026-10-20T15:40
Red Hat
Source ↗
MEDIUM
CVE-2026-113679 - harfbuzz: HarfBuzz: Out-of-bounds write via crafted font in WebAssembly shaper
NEAR-REAL-TIME
CVE-2026-113679 · Red Hat - CVE Feed · published 2026-10-20T15:40
Red Hat
Source ↗
MEDIUM
CVE-2026-113602 - net.minidev/json-smart: json-smart: Input validation bypass via substitute character in strict mode
NEAR-REAL-TIME
CVE-2026-113602 · Red Hat - CVE Feed · published 2026-10-20T15:40
Red Hat
Source ↗
HIGH
CVE-2025-71436 - raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling
NEAR-REAL-TIME
CVE-2025-71436 · Red Hat - CVE Feed · published 2026-10-20T15:40
Red Hat
Source ↗
MEDIUM
CVE-2026-112949 - vitest: Vitest: Cross-site scripting via unescaped mock module URL
NEAR-REAL-TIME
CVE-2026-112949 · Red Hat - CVE Feed · published 2026-10-20T15:19
Red Hat
Source ↗
MEDIUM
CVE-2026-112948 - vitest: vitest: Information disclosure via improper file access restrictions
NEAR-REAL-TIME
CVE-2026-112948 · Red Hat - CVE Feed · published 2026-10-20T15:15
Red Hat
Source ↗