Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 5 threats · Friday, Jun 12· last check 2026-11-04 23:33 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Friday, Jun 12

Most severe in everything

EXPLOITED IN THE WILD

SimpleHelp: OIDC login accepts forged tokens, granting technician sessionsSimpleHelp SimpleHelp1 talking

Apache CXF has Improper Restriction of XML External Entity Referenceorg.apache.cxf:cxf-core

MEDIUMNO CVE YET

Datadog: Delayed EvaluationDatadog

MEDIUMNO CVE YET

npm: intermittent Publish Failuresnpm

Check new threats with your coding agent

It checks this feed against your repository before you add a dependency, and whenever you ask about a CVE.

Friday, Jun 12

CRITICAL10.0EXPLOITEDSimpleHelp: OIDC login accepts forged tokens, granting technician sessionsSimpleHelp SimpleHelp1 talkingVendor2026-06-12 17:14 UTCby CISA KEV1talkingFIX 5.5.16 MEDIUMINCIDENTDatadog: Delayed EvaluationDatadogVendor2026-06-12 17:12 UTCby status page–WHAT TO DO MEDIUMINCIDENTnpm: intermittent Publish FailuresnpmVendor2026-06-12 12:08 UTCby status page–WHAT TO DO LOWINCIDENTSentry: Missing SDK Client Reports and Rate Limiting OutcomesSentryVendor2026-06-12 11:30 UTCby status page–WHAT TO DO CRITICAL9.8Apache CXF has Improper Restriction of XML External Entity Referenceorg.apache.cxf:cxf-corePackage2026-06-12 10:16 UTCby EPSS–FIX 4.2.2

Thursday, Jun 11Friday, Jun 12Saturday, Jun 13