Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-113305 - chromium-browser: chromium-browser: Use after free in Privacy
NEAR-REAL-TIME
CVE-2026-113305 · Red Hat - CVE Feed · published 2026-10-20T21:01
Red Hat
Source ↗
HIGH
CVE-2026-113339 - chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in SVG
NEAR-REAL-TIME
CVE-2026-113339 · Red Hat - CVE Feed · published 2026-10-20T21:01
Red Hat
Source ↗
MEDIUM
GHSA-vx6w-vv9f-6gvg - Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
NEAR-REAL-TIME
CVE-2026-112899 · GitHub Security Advisories · published 2026-10-20T20:53
Pillow
Source ↗
CRITICAL
GHSA-8g5g-8vmr-9782 - Pillow: Heap buffer overflow in ImagingJpegDecode
NEAR-REAL-TIME
CVE-2026-112403 · GitHub Security Advisories · published 2026-10-20T20:40 · correlated from 2 sources
Pillow
Source ↗
MEDIUM
GHSA-jfgx-762w-99vr - @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
NEAR-REAL-TIME
CVE-2026-111753 · GitHub Security Advisories · published 2026-10-20T20:37
@angular
Source ↗
CRITICAL
2026-018: Critical Vulnerabilities in PHP
NEAR-REAL-TIME
CERT-EU - Security Advisories · published 2026-10-20T20:36
EU
Source ↗
HIGH
GHSA-gfr2-rv44-r23c - markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
NEAR-REAL-TIME
CVE-2026-111758 · GitHub Security Advisories · published 2026-10-20T20:28 · correlated from 2 sources
markdown-itRed Hat
Source ↗
HIGH
GHSA-jm63-cq47-j5jp - MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
NEAR-REAL-TIME
CVE-2026-111770 · GitHub Security Advisories · published 2026-10-20T20:07
@modelcontextprotocol
Source ↗
HIGH
GHSA-46jr-4wx8-v453 - MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
NEAR-REAL-TIME
CVE-2026-111768 · GitHub Security Advisories · published 2026-10-20T20:06
@modelcontextprotocol
Source ↗
HIGH
CVE-2026-113725 - virtualenv: virtualenv: arbitrary code execution via crafted environment name
NEAR-REAL-TIME
CVE-2026-113725 · Red Hat - CVE Feed · published 2026-10-20T19:56 · correlated from 2 sources
Red Hatvirtualenv
Source ↗
MEDIUM
CVE-2026-113724 - virtualenv: virtualenv: Insecure file permission modification via symlink following
NEAR-REAL-TIME
CVE-2026-113724 · Red Hat - CVE Feed · published 2026-10-20T19:53 · correlated from 2 sources
Red Hatvirtualenv
Source ↗
MEDIUM
GHSA-r825-w8mm-5pxw - launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
NEAR-REAL-TIME
CVE-2026-112944 · GitHub Security Advisories · published 2026-10-20T19:51 · correlated from 2 sources
launch-editorvitevite-plusRed Hat
Source ↗
HIGH
CVE-2026-113723 - virtualenv: virtualenv: Arbitrary code execution via malicious prompt text
NEAR-REAL-TIME
CVE-2026-113723 · Red Hat - CVE Feed · published 2026-10-20T19:51
Red Hat
Source ↗
HIGH
CVE-2026-113722 - virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers
NEAR-REAL-TIME
CVE-2026-113722 · Red Hat - CVE Feed · published 2026-10-20T19:48 · correlated from 2 sources
Red Hatvirtualenv
Source ↗
HIGH
GHSA-587h-7wmj-h5pm - launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
NEAR-REAL-TIME
CVE-2026-112942 · GitHub Security Advisories · published 2026-10-20T19:48 · correlated from 2 sources
launch-editorvitevite-plusRed Hat
Source ↗
MEDIUM
CVE-2026-113721 - virtualenv: virtualenv: Arbitrary file overwrite via insecure symlink handling
NEAR-REAL-TIME
CVE-2026-113721 · Red Hat - CVE Feed · published 2026-10-20T19:46
Red Hat
Source ↗
MEDIUM
GHSA-rvq5-wwqv-78pq - MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
NEAR-REAL-TIME
CVE-2026-111771 · GitHub Security Advisories · published 2026-10-20T19:43
@modelcontextprotocol
Source ↗
MEDIUM
CVE-2026-113720 - virtualenv: virtualenv: Arbitrary code execution via insecure cached file permissions
NEAR-REAL-TIME
CVE-2026-113720 · Red Hat - CVE Feed · published 2026-10-20T19:43
Red Hat
Source ↗
MEDIUM
CVE-2026-113715 - virtualenv: virtualenv: Environment isolation bypass via crafted destination path
NEAR-REAL-TIME
CVE-2026-113715 · Red Hat - CVE Feed · published 2026-10-20T19:42
Red Hat
Source ↗
MEDIUM
CVE-2026-113719 - virtualenv: virtualenv: Arbitrary file deletion via path traversal in package metadata
NEAR-REAL-TIME
CVE-2026-113719 · Red Hat - CVE Feed · published 2026-10-20T19:42
Red Hat
Source ↗