Live· 12 threats · Friday, Sep 18· last check 2026-11-04 10:21 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Friday, Sep 18

Most severe in everything

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in py-venv-doctor (PyPI)py-venv-doctor

CRITICALNO CVE YET

Sentry: Delayed ingestion of errors in EUSentry

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in zero-baileys (npm)zero-baileys

HIGH8.7

deepmerge mergeObject() allows prototype poisoning of returned objectsdeepmerge

Friday, Sep 18

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in py-venv-doctor (PyPI)py-venv-doctorPackage2026-09-18 21:42 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTVercel: Deployment stuck in initializing stateVercelVendor2026-09-18 21:36 UTCby status page–WHAT TO DO HIGHINCIDENTVercel: Elevated Errors Triggering DeploymentsVercelVendor2026-09-18 20:32 UTCby status page–WHAT TO DO HIGH8.7deepmerge mergeObject() allows prototype poisoning of returned objectsdeepmergePackage2026-09-18 18:18 UTCby EPSS–WHAT TO DO HIGH8.7Withdrawn Advisory: http-cache-semantics max-stale handling can disclose cross-user cached responseshttp-cache-semanticsPackage2026-09-18 18:18 UTCby EPSS–WHAT TO DO HIGH8.7Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patternsbracesPackage2026-09-18 16:17 UTCby GitHub Advisories–WHAT TO DO LOWINCIDENTVercel: Elevated Vercel KMS and Connect ErrorsVercelVendor2026-09-18 12:00 UTCby status page–WHAT TO DO HIGHINCIDENTSentry: Delays in spans ingestionSentryVendor2026-09-18 10:17 UTCby status page–WHAT TO DO CRITICALINCIDENTSentry: Delayed ingestion of errors in EUSentryVendor2026-09-18 08:36 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in zero-baileys (npm)zero-baileysPackage2026-09-18 02:54 UTCby osv-malicious–UNINSTALL MEDIUM6.5Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methodsorg.xerial.snappy:snappy-javaPackage2026-09-18 00:31 UTCby GitHub Advisories–WHAT TO DO HIGH7.5snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methodsorg.xerial.snappy:snappy-javaPackage2026-09-18 00:17 UTCby EPSS–FIX 1.1.10.9