CVE-2026-115845 | AWS MCP Server Python Code Validator run_script input validation
A vulnerability was found in AWS MCP Server and classified as very critical. This affects the function run_script of the
Read MoreSecurity
03
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations.
Read More
Bringing post-quantum cryptography to geographically fenced key management
Cloudflare’s new post-quantum GeoKey Manager protects geographically fenced decryption keys from harvest now, decrypt later attacks. Learn how we redesigned
Read More
Origin Range Requests: Serving large files without range-request tuning
Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to
Read MoreCVE-2026-57845 | Hugging Face Datasets up to 5.1.0 Builder pandas.read_pickle data_files deserialization
A vulnerability identified as critical has been detected in Hugging Face Datasets up to 5.1.0. Affected by this issue is
Read MoreCVE-2026-52356 | D-Link DAP1160L Diagnostic diagnostic.php os command injection
A vulnerability labeled as very critical has been found in D-Link DAP1160L. This affects an unknown part of the file
Read MoreCVE-2026-50787 | E-Sic Livre up to 0.2.2 Captcha restrito/inc/captcha.php l/a/tf/ql resource consumption
A vulnerability marked as problematic has been reported in E-Sic Livre up to 0.2.2. This vulnerability affects unknown code of
Read MoreCVE-2025-45528 | Nitro PDF Pro 14.7 input validation
A vulnerability described as critical has been identified in Nitro PDF Pro 14.7. This issue affects some unknown processing. Such
Read MoreCVE-2026-106071 | Node.js up to 26.12.0 Permission Model privileges management
A vulnerability classified as problematic has been found in Node.js up to 26.12.0. Impacted is an unknown function of the
Read MoreCVE-2026-105481 | Node.js up to 22.23.3/24.22.0/26.12.0 HTTP Agent improper synchronization
A vulnerability classified as critical was found in Node.js up to 22.23.3/24.22.0/26.12.0. The affected element is an unknown function of
Read More