Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 25 threats · Tuesday, Oct 6· last check 2026-11-04 08:31 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Tuesday, Oct 6

Most severe in everything

Bedrock AgentCore Starter Toolkit: agent import runs injected code

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in lore-cs (PyPI)lore-cs

CRITICALNO CVE YET

GitHub: Several services are degradedGitHub

CRITICALNO CVE YET

Sentry: Sentry dashboard downSentry

Tuesday, Oct 6

MEDIUM5.7AWS AgentCore Starter Toolkit: agent import can make unintended network requestsPackage2026-10-06 21:17 UTCby EPSS–WHAT TO DO CRITICAL9.0Bedrock AgentCore Starter Toolkit: agent import runs injected codePackage2026-10-06 21:17 UTCby EPSS–WHAT TO DO HIGH7.1QnABot on AWS: Lambda hook sample lets authenticated users read S3 objectsVendor2026-10-06 21:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in lore-cs (PyPI)lore-csPackage2026-10-06 21:13 UTCby osv-malicious–UNINSTALL CRITICALINCIDENTGitHub: Several services are degradedGitHubVendor2026-10-06 19:57 UTCby status page–WHAT TO DO MEDIUM5.7RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()com.rabbitmq:amqp-clientPackage2026-08-21 09:39 UTCby GitHub Advisories–FIX 5.35.0 HIGH7.5ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeImageSharpPackage2026-08-20 09:48 UTCby EPSS–FIX 3.2.0 CRITICALINCIDENTSentry: Sentry dashboard downSentryVendor2026-10-06 18:57 UTCby status page–WHAT TO DO MEDIUM5.3ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loopSixLabors.ImageSharpPackage2026-09-15 07:21 UTCby EPSS–FIX 3.2.0 HIGH7.5ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output bufferSixLabors.ImageSharpPackage2026-09-15 07:21 UTCby EPSS–FIX 3.2.0 MEDIUM5.3ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensionsSixLabors.ImageSharpPackage2026-09-15 07:21 UTCby EPSS–FIX 4.1.2 HIGH7.5ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram indexSixLabors.ImageSharpPackage2026-09-15 07:21 UTCby EPSS–FIX 3.2.0 HIGH7.5ImageSharp: TIFF CCITT T4 encoder can write past its compressed output bufferSixLabors.ImageSharpPackage2026-09-15 07:22 UTCby EPSS–FIX 3.2.0 HIGH8.2Payload external upload trust validation issuepayloadPackage2026-09-18 16:47 UTCby GitHub Advisories–FIX 3.90.0 MEDIUMINCIDENTOpenAI: Computer Use Is Experiencing IssuesOpenAIVendor2026-10-06 17:15 UTCby status page–WHAT TO DO HIGH7.1External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration in github.com/external-secrets/external-secretsgithub.com/external-secrets/external-secretsPackage2026-10-06 09:50 UTCby EPSS–FIX 1.3.2 HIGHINCIDENTVercel: Vercel Auth login failures for pages with Deployment Protection enabledVercelVendor2026-10-06 16:10 UTCby status page–WHAT TO DO HIGHINCIDENTCircleCI: Delays in pipelines, workflows, UI data, and notificationsCircleCIVendor2026-10-06 16:00 UTCby status page–WHAT TO DO MEDIUMINCIDENTOpenAI: Errors processing large PDFs in the Responses APIOpenAIVendor2026-10-06 15:45 UTCby status page–WHAT TO DO LOWINCIDENTSupabase: Upgrade IssuesSupabaseVendor2026-10-06 15:23 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @kxa/xbails (npm)@kxa/xbailsPackage2026-10-06 14:39 UTCby osv-malicious–UNINSTALL HIGHINCIDENTAnthropic: Elevated errors for Claude Opus 5.5AnthropicVendor2026-10-06 12:24 UTCby status page–WHAT TO DO MEDIUMINCIDENTFly.io: Impaired IPv6 connectivity in ORDFly.ioVendor2026-10-06 11:59 UTCby status page–WHAT TO DO MEDIUMINCIDENTVercel: Elevated Sandbox error rates in Paris (cdg1)VercelVendor2026-10-06 09:12 UTCby status page–WHAT TO DO MEDIUMINCIDENTSupabase: Increased errors on management api leading to project operation failuresSupabaseVendor2026-10-06 07:53 UTCby status page–WHAT TO DO

Monday, Oct 5Tuesday, Oct 6Wednesday, Oct 7