Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
30 / 236 results
criticalbug_reportVulnerabilityLiteLLM 1.107.0 supply chain attack steals credentials via Python hooks
LiteLLM version 1.107.0 distributed via PyPI and official container images on October 21, 2026. Affects any Python environment where the compromised package was installed, including developer workstations, CI/CD agents, test systems, containers, and…
criticalbug_reportVulnerabilityRuby patches Onigmo regex RCE flaws exploited via GitLab untrusted input
Ruby versions 4.0.0–4.0.8, 3.4.0–3.4.11, and 3.3.0–3.3.12. Ruby 3.2 and earlier (EOL) will not receive patches. GitLab versions 7.0+ were affected; patched in 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.
criticalbug_reportVulnerabilityPillow library RCE via EPS filename injection; upgrade to 13.0.0 required
Pillow versions 2.6.0 through 12.3.0. Affects Python applications processing EPS images with Ghostscript installed, particularly web upload endpoints that accept user-controlled filenames.
criticalbug_reportVulnerabilityNode.js Brotli RCE (CVE-2026-111497) exploited via crafted compression data
Node.js versions 22.x, 24.x, and 26.x on all architectures. Confirmed RCE on 24.22.0 Linux arm64. Applications decoding untrusted Brotli data via fetch() responses or request body middleware (Express 5.x body parsers, body-parser 2.x) are vulnerable.…
criticalbug_reportVulnerabilityGitLab CVE-2026-110264: Unauthenticated RCE in CE/EE (CVSS 10.0)
GitLab Community Edition (CE) and Enterprise Edition (EE) versions 7.0 through 19.5.0. Specifically: 7.0–18.11.12, 19.0–19.0.9, 19.1–19.1.8, 19.2–19.2.8, 19.3–19.3.5, 19.4–19.4.2, and 19.5.0.
highbug_reportVulnerabilityOpenCode AI agent flaw allows MCP server code execution on Windows/WSL
OpenCode AI coding agent versions 1.0.137 through 1.18.32 on Windows and Windows Subsystem for Linux (WSL). macOS and Linux are not affected. Fixed in version 1.18.33 released September 28, 2024.
criticalbug_reportVulnerabilityLiteLLM supply chain attack: malicious v1.107.0 steals credentials via PyPI
LiteLLM Python package v1.107.0 on PyPI (Oct 21, 2026, 11:39-13:23 UTC) and Docker images v1.107.0, latest, main-latest, main-stable on Docker Hub and GHCR (11:46-14:20 UTC).
criticalbug_reportVulnerabilityGitLab CVSS 10.0 RCE affects all self-managed versions since 2014
GitLab self-managed installations versions 7.0 (2014) through 19.5.0. Fixed in 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13. GitLab.com and GitLab Dedicated already patched.
criticalbug_reportVulnerabilityLiteLLM 1.107.0 supply chain attack delivers credential stealer via PyPI
LiteLLM Python package version 1.107.0 distributed via PyPI wheels (all platforms: macOS x86_64/ARM64, Linux x86_64/aarch64, Windows AMD64) and Docker images. Compromised through stolen GitHub CLI OAuth tokens from three engineer accounts.
criticalbug_reportVulnerabilityPHP releases emergency patches for critical PHP2Shell RCE flaws
All PHP installations serving web requests: PHP 8.5 below 8.5.12, PHP 8.4 below 8.4.27, PHP 8.3 below 8.3.36, PHP 8.2 below 8.2.35, and all versions back to PHP 5.4.
criticalbug_reportVulnerabilityTwo critical RCE flaws in PHP (CVE-2026-109618, CVE-2026-109619) patched Oct 21
All PHP versions from PHP 5 onwards. CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2. Unauthenticated remote code execution possible. Patches scheduled for 21 October 2026 at 14:00 UTC.
highbug_reportVulnerabilityMultiple high severity vulnerabilities in Apache Camel require patching
Apache Camel - specific versions not provided in advisory. All deployments using affected versions should be considered at risk pending detailed vendor bulletin review.
highbug_reportVulnerabilityGo 1.27.3 and 1.26.10 block eight eMudhra CA keys over undisclosed risk
Go versions 1.27.3 and 1.26.10 (released October 20, 2026). All Go programs must be rebuilt with these versions to enforce the block. Eight intermediate CA keys from eMudhra (six TLS, two code-signing) under emSign Root TLS CA - G3 and emSign Root CS…
highbug_reportVulnerabilityOVHcloud CLI tool backdoored on GitHub to steal developer credentials
OVHcloud CLI versions 0.11.0 through 0.15.0 on macOS (Intel/ARM), Linux (x86_64/ARM64), and Windows x86-64. Compromised releases available October 19, 2026 from 14:47 to 16:21 UTC. Version 0.10.0 and earlier, plus 0.16.0 are clean.
highbug_reportVulnerabilityGhostAction supply chain attack expands to 94 repos with credential stealer
94 GitHub repositories across 66 owners compromised. Targets open-source developers using GitHub Actions, VS Code, and OAuth device flows. Malware disguised as font file (fa-solid-400.woff2) steals AWS keys, PyPI/npm tokens, Git credentials, Kubernet…
highbug_reportVulnerabilityFake Web3 accelerator spreads malware via npm to steal credentials
npm packages @apexacc/cli and @apexacc/audit (now removed); targets Windows and macOS developer systems. Campaign linked to Apex Accelerator/Apex Foundation (apexaccs[.]org, apexfdn[.]xyz).
highbug_reportVulnerabilityMalicious npm package 'imgdecode' delivers shellcode loader on Windows
npm package 'imgdecode' versions 1.0.0 through 1.0.3, published by user 'malfexteste8'. Part of broader MALFEX campaign targeting Windows systems via npm supply chain. Downloaded 979 times. Package was still available on npm as of October 17, 2026.
highbug_reportVulnerabilityMalicious Arch Linux packages impersonate yay and paru AUR helpers
Arch Linux users who installed typosquatted packages from AUR (Arch User Repository) uploaded by user "marchos1as" between October 13-15, 2026. Malicious packages include "yyay" and similar variants impersonating legitimate AUR helpers yay and paru.
criticalbug_reportVulnerabilityNext.js patches two critical RCE flaws in caching and SVG processing
Next.js versions 10.0.0–15.5.27 and 16.0.0–16.4.0. Critical RCE in React Server Components (v16 with Cache Components enabled, use cache functions returning multiple typed arrays).
criticalbug_reportVulnerabilityAI-assisted Chrome full-chain exploit built in 6 days, all bugs patched
Google Chrome versions prior to 152.0.7977.82 on Windows. Three vulnerabilities chained: CVE-2026-85045 (V8 JavaScript engine), CVE-2026-78952 (Crashpad crash handler), and one unidentified bug in animated-WebP decoder.
highbug_reportVulnerabilityDocker Hub PAT transfer flaw let attackers push images as other users
Docker Hub users who converted personal accounts to organizations between August 26, 2024, and September 30, 2026 (two-year window). Personal Access Tokens (PATs) were transferred to designated organization owners without notification.
highbug_reportVulnerabilitynpm trusted publishing flaw enabled hijack of 1,500+ packages via slug reuse
npm packages using trusted publishing with GitHub Actions where the linked repository slug (owner/repository) has never completed a successful publish, or where repositories have been renamed, transferred, or deleted.
criticalbug_reportVulnerabilityPre-auth RCE in AnyDesk for Linux requires immediate patching
AnyDesk for Linux - specific vulnerable versions not disclosed in available information. Pre-authentication remote code execution vulnerability affects unauthenticated network-accessible installations.
criticalbug_reportVulnerabilityGitLab CE/EE critical RCE (CVE-2026-97229) allows unauthenticated code execution
GitLab Community Edition (CE) and Enterprise Edition (EE) self-managed instances: versions before 19.4.2, before 19.3.4, and before 19.2.8. The critical vulnerability CVE-2026-97229 (CVSS 10.0) affects the CI/CD regular expression compiler.
highperson_alertThreat ActorGhostAction Campaign Injects Credential-Stealing Workflows into 340+ Repos
GhostAction is a large-scale supply chain attack campaign first identified in September 2025, focused on compromising GitHub maintainer accounts to inject malicious GitHub Actions workflows.
criticalbug_reportVulnerabilityTensorlake npm package 0.5.144 compromised with Shai-Hulud worm
npm package "tensorlake" version 0.5.144 (TypeScript SDK for Tensorlake applications). Malicious version no longer available on npm registry. Affects users who installed this specific version, particularly those with access to CI/CD pipelines, cloud…
highbug_reportVulnerabilityMALFEX campaign: 8 malicious npm packages deliver Overlord RAT, 40K+ downloads
npm ecosystem; 8 malicious packages (tlxbnhd, tldriver, mxdriver, img-to-native, native-runner, function-flag, function-color, cdn-img-fetch) with 40,767 total downloads since August 2023.
criticalbug_reportVulnerabilityCritical RCE in LMCache (CVE-2026-105192) allows unauthenticated code execution
LMCache versions 0.3.9 through 0.5.5 (including 0.5.6 release candidates and development branch) when multiprocess mode is configured with routable network addresses. Also affects vLLM deployments using LMCache multiprocess connector.
criticalbug_reportVulnerabilityAtlassian CVE-2026-21589 exploited in wild after PoC release
Self-hosted Atlassian Data Center products: Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. Unauthenticated arbitrary file read vulnerability.
criticalbug_reportVulnerabilityAtlassian Data Center CVE-2026-21589 exploited within 2 hours of disclosure
Atlassian Data Center products: Bitbucket (versions before 9.4.26, 10.2.8, 10.5.1), Confluence (before 9.2.26, 10.2.19), Jira Service Management and Software (before 5.12.40/9.12.40, 10.3.26, 11.3.12), Bamboo (before 10.2.24, 12.1.12), Crowd (before…