CVE-2026-97626
Medium Severity Description Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept:
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-97208
Medium Severity Description The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was
CVE-2026-96594
Medium Severity Description The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are
USN-8892-1: Ubuntu Pro for WSL vulnerability
Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a
RHSA-2026:76877: Moderate: ghostscript security update
An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
DSA-6548-1 node-shell-quote – security update
https://security-tracker.debian.org/tracker/DSA-6548-1
DSA-6546-1 rails – security update
https://security-tracker.debian.org/tracker/DSA-6546-1
DSA-6547-1 ruby-jwt – security update
https://security-tracker.debian.org/tracker/DSA-6547-1
USN-8890-1: libsoup vulnerabilities
It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue
RHSA-2026:76895: Important: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
RHSA-2026:76945: Important: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.