Live· 13 threats · Thursday, Aug 13· last check 2026-11-04 13:22 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Thursday, Aug 13

Most severe in everything

CRITICAL8.9

EXPLOITED IN THE WILD

synacor zimbra collaboration suite: A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional…Synacor Zimbra Collaboration Suite (ZCS)

HIGHNO CVE YET

Sentry: Span & Transaction ingestion delayed in DESentry

HIGHNO CVE YET

Anthropic: Elevated errors for Claude Mythos 5, Claude Fable 5, and Claude Sonnet 5Anthropic

MEDIUM6.9

SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernel

Thursday, Aug 13

MEDIUM4.2podman quadlet install --replace does not fully replace the old file in github.com/containers/podmangithub.com/containers/podmanPackage2026-08-13 18:17 UTCby EPSS–WHAT TO DO MEDIUMINCIDENTHashiCorp: Terraform AWS Provider v6.59.0 — errors during plan for aws_network_acl_rule resourcesHashiCorpVendor2026-08-13 17:50 UTCby status page–WHAT TO DO HIGHINCIDENTSentry: Span & Transaction ingestion delayed in DESentryVendor2026-08-13 17:47 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Disruption with GHEC Team SyncGitHubVendor2026-08-13 16:21 UTCby status page–WHAT TO DO CRITICAL8.9EXPLOITEDsynacor zimbra collaboration suite: A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional…Synacor Zimbra Collaboration Suite (ZCS)Vendor2026-08-13 16:19 UTCby InfraStack Analyst–FIX 10.1.20 LOWINCIDENTDigitalOcean: Volume Attach/Detach events in FRA1DigitalOceanVendor2026-08-13 14:59 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Incident with WebhooksGitHubVendor2026-08-13 14:45 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Errors with the Fable 5 Model in CopilotGitHubVendor2026-08-13 14:43 UTCby status page–WHAT TO DO HIGHINCIDENTAnthropic: Elevated errors for Claude Mythos 5, Claude Fable 5, and Claude Sonnet 5AnthropicVendor2026-08-13 14:33 UTCby status page–WHAT TO DO MEDIUM6.9SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernelPackage2026-08-13 12:17 UTCby EPSS–FIX 0.0.0-20260812083335-251596fc0de2 MEDIUM6.9SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernelPackage2026-08-13 12:17 UTCby EPSS–FIX 0.0.0-20260812083335-251596fc0de2 MEDIUM6.9SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernelPackage2026-08-13 12:17 UTCby EPSS–FIX 0.0.0-20260812083335-251596fc0de2 MEDIUM6.9SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem in github.com/siyuan-note/siyuan/kernelgithub.com/siyuan-note/siyuan/kernelPackage2026-08-13 12:17 UTCby EPSS–FIX 0.0.0-20260812083335-251596fc0de2