Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 8 threats · Monday, Aug 3· last check 2026-11-04 14:24 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Monday, Aug 3

Most severe in everything

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernel

Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosuregetgrav/grav

Duplicate Advisory: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)gitpython

MongoDB Atlas: Elevated errors on VoyageAI APIsMongoDB Atlas

Monday, Aug 3

HIGHINCIDENTMongoDB Atlas: Elevated errors on VoyageAI APIsMongoDB AtlasVendor2026-08-03 18:47 UTCby status page–WHAT TO DO HIGH7.0Duplicate Advisory: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)gitpythonPackage2026-08-03 15:32 UTCby GitHub Advisories–FIX 3.1.53 MEDIUMINCIDENTAnthropic: Degraded performance on Claude Sonnet 5AnthropicVendor2026-08-03 15:13 UTCby status page–WHAT TO DO HIGH8.6Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosuregetgrav/gravPackage2026-08-03 14:16 UTCby EPSS–FIX 2.0.11 CRITICAL10.0SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernelPackage2026-08-03 14:16 UTCby EPSS–FIX 0.0.0-20260721043339-eef10568384e MEDIUMINCIDENTDigitalOcean: Cloud Control Panel AccessDigitalOceanVendor2026-08-03 13:58 UTCby status page–WHAT TO DO MEDIUMINCIDENTAnthropic: Error rates across multiple modelsAnthropicVendor2026-08-03 12:52 UTCby status page–WHAT TO DO MEDIUM6.5NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionnltkPackage2026-08-03 08:17 UTCby EPSS–FIX 3.9.3

Sunday, Aug 2Monday, Aug 3Tuesday, Aug 4