Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 23 threats · Thursday, Oct 1· last check 2026-11-04 08:59 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Thursday, Oct 1

Most severe in everything

EXPLOITED IN THE WILD

fortinet fortimail: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…Fortinet FortiMail2 talking

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in shortneer (PyPI)shortneer

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in spo365-graph (PyPI)spo365-graph

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in @kelvdra/baileys (npm)@kelvdra/baileys

Thursday, Oct 1

MEDIUM6.0Powertools for AWS Lambda (Python): masking errors leak sensitive valuesPackage2026-10-01 21:12 UTCby EPSS–WHAT TO DO MEDIUM5.4Filament: Multi-factor authentication (app) management actions do not require password reauthenticationfilament/filamentPackage2026-09-23 21:21 UTCby GitHub Advisories–FIX 4.13.3 HIGH8.7Amazon Ion Python: deeply nested Ion data crashes the reader, denial of servicePackage2026-10-01 20:46 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in shortneer (PyPI)shortneerPackage2026-10-01 21:00 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in spo365-graph (PyPI)spo365-graphPackage2026-10-01 18:58 UTCby osv-malicious–UNINSTALL HIGH8.2AWS security-agent-mcp-server: argument injection lets diff scans write arbitrary host filesAI agents & MCP2026-10-01 18:17 UTCby EPSS–WHAT TO DO HIGH8.2Zod can exhaust memory while validating oversized constrained collectionszodPackage2026-10-01 18:17 UTCby GitHub Advisories–FIX 4.6.6 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @kelvdra/baileys (npm)@kelvdra/baileysPackage2026-10-01 17:02 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTAnthropic: Delayed credits on the Claude PlatformAnthropicVendor2026-10-01 16:20 UTCby status page–WHAT TO DO MEDIUM6.9AWS EFS CSI Driver: mount option injection via mounttargetipmap volume attributeInfrastructure2026-10-01 16:17 UTCby EPSS–WHAT TO DO HIGHINCIDENTMongoDB Atlas: Trigger processing may be delayed globallyMongoDB AtlasVendor2026-10-01 15:41 UTCby status page–WHAT TO DO MEDIUM6.3next.js cache leak across root param values in nested 'use cache' functionsnextPackage2026-09-30 16:14 UTCby GitHub Advisories–FIX 16.3.8 HIGHNOT SCOREDdevalue: Custom ArrayBuffer revivers can bypass typed-array allocation validationdevaluePackage2026-10-01 15:15 UTCby GitHub Advisories–FIX 5.9.3 MEDIUMINCIDENTGitHub: Actions Job DelaysGitHubVendor2026-10-01 14:47 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: Elevated request latencyGitHubVendor2026-10-01 13:37 UTCby status page–WHAT TO DO HIGH6.5Duplicate Advisory: Ghost: Authorization Bypass in Comment Like FeatureghostRuntime2026-10-01 12:31 UTCby GitHub Advisories–FIX 6.44.1 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in friendly-tools (PyPI)friendly-toolsPackage2026-10-01 12:04 UTCby osv-malicious–UNINSTALL HIGH7.1Ghost: Authorization Bypass in Comment Like FeatureghostRuntime2026-08-11 16:02 UTCby EPSS–FIX 6.44.1 LOWINCIDENTPyPI: Multiple services unavailablePyPIVendor2026-10-01 11:13 UTCby status page–WHAT TO DO MEDIUMINCIDENTCircleCI: Delays starting Gen 2 Docker JobsCircleCIVendor2026-10-01 09:06 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: [Retroactive] Actions workflow run failures after deployment gate approvalsGitHubVendor2026-10-01 02:00 UTCby status page–WHAT TO DO MEDIUMINCIDENTFly.io: Delayed ingestion of app logsFly.ioVendor2026-10-01 01:11 UTCby status page–WHAT TO DO CRITICAL9.8EXPLOITEDfortinet fortimail: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…Fortinet FortiMail2 talkingVendor2026-10-01by InfraStack Analyst2talkingFIX 7.4.9

Wednesday, Sep 30Thursday, Oct 1Friday, Oct 2