New CVEs
topic · security/cve-published
§01
about
Recently published CVE vulnerability records with CVSS scores (CIRCL).
§02
recent events
LIVElast event 0s ago8 evt / 1h
showing 10 of 2,938 events in this window (2,988 total on topic). adjust the range or clear it with ALL.
range
01BIT-golang-2026-33811Crash when handling long CNAME response in net{"url":"https://www.cve.org/CVERecord?id=BIT-golang-2026-33811","cvss":null,"cve…
EVENT. cms7bsknID. cms7bskn1av9nkh0c2qd28oqzSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-golang-2026-33811",
"cvss": null,
"cve_id": "BIT-golang-2026-33811",
"source": "circl",
"summary": "Crash when handling long CNAME response in net",
"severity": null,
"references": [
{
"url": "https://go.dev/cl/767860",
"type": "WEB"
},
{
"url": "https://go.dev/issue/78803",
"type": "WEB"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"type": "WEB"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4981",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}02BIT-postgresql-2026-6477PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory{"url":"https://www.cve.org/CVERecord?id=BIT-postgresql-2026-6477","cvss":null,"…
EVENT. cms7bsk2ID. cms7bsk2xav9lkh0chaq9k57bSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-postgresql-2026-6477",
"cvss": null,
"cve_id": "BIT-postgresql-2026-6477",
"source": "circl",
"summary": "PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory",
"severity": null,
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6477",
"type": "WEB"
},
{
"url": "https://www.postgresql.org/support/security/CVE-2026-6477/",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:21182",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:22878",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26181",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}03BIT-prometheus-2026-42151Prometheus Azure AD remote write OAuth client secret exposed via config API{"url":"https://www.cve.org/CVERecord?id=BIT-prometheus-2026-42151","cvss":null,…
EVENT. cms7bsjiID. cms7bsji8av9jkh0cx7l9x3anSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-prometheus-2026-42151",
"cvss": null,
"cve_id": "BIT-prometheus-2026-42151",
"source": "circl",
"summary": "Prometheus Azure AD remote write OAuth client secret exposed via config API",
"severity": null,
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2026:25039",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:25245",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:25504",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:34357",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:34359",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}04BIT-prometheus-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payload{"url":"https://www.cve.org/CVERecord?id=BIT-prometheus-2026-42154","cvss":null,…
EVENT. cms7bsixID. cms7bsixrav9hkh0crvincv18SRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-prometheus-2026-42154",
"cvss": null,
"cve_id": "BIT-prometheus-2026-42154",
"source": "circl",
"summary": "Prometheus: remote read endpoint allows denial of service via crafted snappy payload",
"severity": null,
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2026:25039",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:25245",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:29770",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:30651",
"type": "WEB"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:34357",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}05BIT-sqlite-2026-51296BIT-sqlite-2026-51296{"url":"https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51296","cvss":null,"cve…
EVENT. cms7bsi7ID. cms7bsi75av9dkh0cgujk1gkkSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51296",
"cvss": null,
"cve_id": "BIT-sqlite-2026-51296",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://github.com/programmervuln/cveadvisory-/commit/75a435c839a4bcc6ca2ad21e3b07c978d814acb2",
"type": "WEB"
},
{
"url": "https://github.com/sqlite/sqlite/blob/master/src/json.c",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51296",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}06BIT-sqlite-2026-51297BIT-sqlite-2026-51297{"url":"https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51297","cvss":null,"cve…
EVENT. cms7bshnID. cms7bshneav9bkh0cmcr8lztiSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51297",
"cvss": null,
"cve_id": "BIT-sqlite-2026-51297",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51297",
"type": "WEB"
},
{
"url": "https://github.com/sqlite/sqlite/blob/master/src/json.c",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51297",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}07BIT-sqlite-2026-51298BIT-sqlite-2026-51298{"url":"https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51298","cvss":null,"cve…
EVENT. cms7bsh3ID. cms7bsh3fav99kh0c34u1cqnfSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51298",
"cvss": null,
"cve_id": "BIT-sqlite-2026-51298",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51298",
"type": "WEB"
},
{
"url": "https://github.com/sqlite/sqlite/blob/master/src/json.c",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51298",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}08BIT-sqlite-2026-51302BIT-sqlite-2026-51302{"url":"https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51302","cvss":null,"cve…
EVENT. cms7bsgfID. cms7bsgfpav97kh0chcjtkbcfSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51302",
"cvss": null,
"cve_id": "BIT-sqlite-2026-51302",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51302",
"type": "WEB"
},
{
"url": "https://github.com/sqlite/sqlite/blob/master/src/expr.c",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51302",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}09BIT-sqlite-2026-51304BIT-sqlite-2026-51304{"url":"https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51304","cvss":null,"cve…
EVENT. cms7bsfvID. cms7bsfvnav95kh0co04k9tllSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=BIT-sqlite-2026-51304",
"cvss": null,
"cve_id": "BIT-sqlite-2026-51304",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51304",
"type": "WEB"
},
{
"url": "https://github.com/sqlite/sqlite/blob/master/src/expr.c",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51304",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}10GHSA-w973-7qcg-m257GHSA-w973-7qcg-m257{"url":"https://www.cve.org/CVERecord?id=GHSA-w973-7qcg-m257","cvss":null,"cve_i…
EVENT. cms6qbniID. cms6qbnitapvtkh0c3eiqs1leSRC. key:cmpxakb6…
{
"url": "https://www.cve.org/CVERecord?id=GHSA-w973-7qcg-m257",
"cvss": null,
"cve_id": "GHSA-w973-7qcg-m257",
"source": "circl",
"summary": null,
"severity": null,
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15831",
"type": "ADVISORY"
},
{
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released",
"type": "WEB"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/605484",
"type": "WEB"
}
],
"updated_at": null,
"published_at": null
}showing 1–10 of 2,938older →
§03
subscribe
three pathways carry every event on this topic. pick the one that fits your agent.
GETrss feed
any reader · no authhttps://api.callsign.sh/v1/public/channels/security/topics/cve-published/feed.xmlGETjson pull
poll on your schedule · optional since/untilhttps://api.callsign.sh/v1/public/channels/security/topics/cve-published.jsonPOSTwebhook
push delivery · one POST per eventsubscribe by reader, by pull loop, or by webhook above