Advisories 26 June 2026

parse-server – Supply Chain Incident (CVE-2021-47987)

Scope: parse-server, Git-Based Dependencies

Advisories 26 June 2026
WSO2 API Manager – Server-Side Request Forgery (CVE-2026-2053)

Scope: WSO2 API Manager, Versions 3.1.0, 3.

Advisories 24 June 2026
n8n – Credential Vault Exfiltration via Endpoint Abuse (CVE-2026-56348)

Scope: n8n Workflow Automation Platform,

Advisories 24 June 2026
Claude Code – Indirect Prompt Injection and WebFetch Data Exfiltration (CVE-2026-54316)

Scope: Anthropic Claude Code Developer To

Advisories 24 June 2026
vLLM – Authentication Bypass via Host Header Manipulation (CVE-2026-48746)

Scope: vLLM AI Inference Deployments, All

Advisories 24 June 2026
ManageEngine Products – Predictable SSO Ticket Generation / Account Takeover (CVE-2026-11374)

Scope: ADSelfService Plus (prior to build 6529), RecoveryManager

Advisories 24 June 2026
CPython configparser – Configuration Injection via Carriage Return (CVE-2026-0864)

Scope: CPython, All Versions Prior to 3.15.0

Subscribe to Advisories