Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 9 threats · Wednesday, Jul 15· last check 2026-11-04 16:20 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Wednesday, Jul 15

Most severe in everything

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in xyq-drama-skill (PyPI)xyq-drama-skill

CRITICALNO CVE YET

Render: Render Dashboard UnavailableRender

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/ciliumgithub.com/cilium/cilium

obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/deleteobsidian-local-rest-api

Wednesday, Jul 15

MEDIUMINCIDENTVercel: Errors accessing teams that require 2FAVercelVendor2026-07-15 23:04 UTCby status page–WHAT TO DO MEDIUM5.8Anubis: Policy bypass via client controlled X-Original-URI header in github.com/TecharoHQ/anubisgithub.com/TecharoHQ/anubisPackage2026-07-15 22:17 UTCby EPSS–FIX 1.26.0 HIGH8.8obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/deleteobsidian-local-rest-apiPackage2026-06-04 13:27 UTCby GitHub Advisories–FIX 4.1.3 HIGHINCIDENTRender: Some users enrolled in 2FA are experiencing login issuesRenderVendor2026-07-15 21:50 UTCby status page–WHAT TO DO HIGH8.9Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/ciliumgithub.com/cilium/ciliumPackage2026-07-15 20:17 UTCby EPSS–FIX 1.17.17 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in xyq-drama-skill (PyPI)xyq-drama-skillPackage2026-07-15 14:29 UTCby osv-malicious–UNINSTALL HIGH7.3Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxPraisonAIAI agents & MCP2026-07-15 12:32 UTCby GitHub Advisories–WHAT TO DO HIGH7.3PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxpraisonaiAI agents & MCP2026-06-25 10:21 UTCby EPSS–FIX 4.6.78 CRITICALINCIDENTRender: Render Dashboard UnavailableRenderVendor2026-07-15 00:22 UTCby status page–WHAT TO DO

Tuesday, Jul 14Wednesday, Jul 15Thursday, Jul 16