Live· 15 threats · Thursday, Sep 24· last check 2026-11-04 09:46 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Thursday, Sep 24

Most severe in everything

CRITICAL9.3

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass in github.com/ixofoundation/ixo-blockchaingithub.com/ixofoundation/ixo-blockchain

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in vercel-runtime-python (PyPI)vercel-runtime-python

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in prosocks (PyPI)prosocks

CRITICALNO CVE YET

Supabase: Permission errors in the Supabase DashboardSupabase

Thursday, Sep 24

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in vercel-runtime-python (PyPI)vercel-runtime-pythonPackage2026-09-24 23:23 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in prosocks (PyPI)prosocksPackage2026-09-24 20:27 UTCby osv-malicious–UNINSTALL MEDIUM4.3Dozzle label filters do not restrict container event and statistics streams in github.com/amir20/dozzlegithub.com/amir20/dozzlePackage2026-09-13 13:35 UTCby EPSS–FIX 1.29.1-0.20260622172006-19c01e0fb491 HIGH8.7ZITADEL: Actions V1 sandbox escape: host file read via require() in github.com/zitadel/zitadelgithub.com/zitadel/zitadelOther2026-07-17 13:12 UTCby EPSS–FIX 1.80.0-v2.20.0.20260717062331-baf6ed501b68 HIGH8.2ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadelgithub.com/zitadel/zitadelPackage2026-07-17 13:12 UTCby EPSS–FIX 1.80.0-v2.20.0.20260717062356-56f4798ed31f CRITICAL9.3ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass in github.com/ixofoundation/ixo-blockchaingithub.com/ixofoundation/ixo-blockchainRuntime2026-06-24 12:12 UTCby EPSS–WHAT TO DO HIGHINCIDENTFly.io: State database issues in GRUFly.ioVendor2026-09-24 17:11 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Disruption with billing information updatesGitHubVendor2026-09-24 16:51 UTCby status page–WHAT TO DO MEDIUMINCIDENTSupabase: Project Lifecycle Issues in eu-west-1SupabaseVendor2026-09-24 15:36 UTCby status page–WHAT TO DO HIGHINCIDENTFly.io: Private Networking issues (6PN)Fly.ioVendor2026-09-24 15:11 UTCby status page–WHAT TO DO MEDIUM5.3Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifierssprintf-jsPackage2026-09-24 14:18 UTCby GitHub Advisories–WHAT TO DO CRITICALINCIDENTSupabase: Permission errors in the Supabase DashboardSupabaseVendor2026-09-24 11:13 UTCby status page–WHAT TO DO HIGHNOT SCOREDCVE-2026-96883 - Type confusion in AWS pgcollection allows remote code executionPackage2026-09-24by Vendor & lab pages–WHAT TO DO HIGH8.8Kiro IDE: file write tool lets crafted repos run commands and poison agentAI agents & MCP2026-09-24by EPSS–WHAT TO DO HIGH8.8pgcollection: type confusion lets an authenticated database user run codePackage2026-09-24by EPSS–WHAT TO DO