Live· 13 threats · Thursday, Aug 6· last check 2026-11-04 14:06 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Thursday, Aug 6

Most severe in everything

CRITICAL10.0

EXPLOITED IN THE WILD

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or…WSO2 Multiple Products

CRITICAL9.8

EXPLOITED IN THE WILD

apple macos: An authentication issue was addressed with improved state managementApple macOS1 talking

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in @bananacool467/ui-tools (npm)@bananacool467/ui-tools

HIGHNO CVE YET

Sentry: Delayed Error ingestion in our US regionSentry

Thursday, Aug 6

CRITICAL9.8EXPLOITEDCalif: No Country for Old Passwordsapple macos: An authentication issue was addressed with improved state managementApple macOS1 talkingVendor2026-08-06 22:18 UTCby InfraStack Analyst1talkingFIX 14.8.9 LOW2.1GitHub CLI allows attestation verification bypass through unescaped regex metacharacters in github.com/cli/cligithub.com/cli/cliPackage2026-08-06 22:18 UTCby EPSS–FIX 2.97.0 MEDIUM5.1GitHub CLI allows path traversal through unescaped request URL components in github.com/cli/cligithub.com/cli/cliPackage2026-08-06 22:18 UTCby EPSS–FIX 2.97.0 LOW3.3GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cligithub.com/cli/cliPackage2026-08-06 22:18 UTCby EPSS–FIX 2.97.0 MEDIUMINCIDENTDigitalOcean: Functions on App PlatformDigitalOceanVendor2026-08-06 19:01 UTCby status page–WHAT TO DO MEDIUMINCIDENTDatadog: Delayed Processes dataDatadogVendor2026-08-06 18:51 UTCby status page–WHAT TO DO MEDIUMINCIDENTVercel: Delays delivering log drainsVercelVendor2026-08-06 16:37 UTCby status page–WHAT TO DO LOWINCIDENTDigitalOcean: Multiple Services AvailabilityDigitalOceanVendor2026-08-06 16:33 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @bananacool467/ui-tools (npm)@bananacool467/ui-toolsPackage2026-08-06 13:54 UTCby osv-malicious–UNINSTALL LOWINCIDENTCircleCI: Usage API data delayed for 8/5CircleCIVendor2026-08-06 13:06 UTCby status page–WHAT TO DO HIGHINCIDENTSentry: Delayed Error ingestion in our US regionSentryVendor2026-08-06 08:59 UTCby status page–WHAT TO DO LOWINCIDENTHashiCorp: DR Cluster Creation FailuresHashiCorpVendor2026-08-06 08:40 UTCby status page–WHAT TO DO CRITICAL10.0EXPLOITEDThe JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or…WSO2 Multiple ProductsVendor2026-05-03by InfraStack Analyst–FIX 4.6.0 L21