https://securelayer7.net/lab/cve-2026-54167-pipelines-as-code-github-app-jwt-exfiltration-enterprise-host-hea SecureLayer7 en 2026-08-20T19:31:01.063Z CVE-2026-54167: Pipelines-as-Code GitHub App JWT Exfiltration via Untrusted X-GitHub-Enterprise-Host Header CVE Advisory https://securelayer7.net/lab/cve-2026-54175-backpack-crud-unverified-password-change-mass-assignment SecureLayer7 en 2026-08-20T19:28:48.686Z CVE-2026-54175: Laravel Backpack CRUD Unverified Password Change via Mass Assignment CVE Advisory https://securelayer7.net/lab/cve-2026-59989-phalcon-volt-join-filter-code-injection-rce SecureLayer7 en 2026-08-21T21:28:49.288Z CVE-2026-59989: Phalcon Volt Compiler join Filter PHP Code Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-61539-xinference-eval-injection-llama3-tool-parser-rce SecureLayer7 en 2026-08-21T21:21:36.323Z CVE-2026-61539: Xinference Remote Code Execution via Unsafe eval() in Llama3 Tool-Call Parser CVE Advisory https://securelayer7.net/lab/cve-2026-63135-yourls-stored-xss-referer-statistics-chart SecureLayer7 en 2026-08-21T21:14:56.252Z CVE-2026-63135: YOURLS Stored XSS via Crafted Referer Header in Statistics Chart CVE Advisory https://securelayer7.net/lab/cve-2026-63421-keystone-graphql-maxtake-negative-bypass SecureLayer7 en 2026-08-21T21:30:01.913Z CVE-2026-63421: @keystone-6/core graphql.maxTake Bypass via Negative take CVE Advisory https://securelayer7.net/lab/cve-2026-63462-unleash-server-dos-recursive-json-stringify SecureLayer7 en 2026-08-21T19:28:56.085Z CVE-2026-63462: unleash-server Unauthenticated DoS via Recursive JSON Serialization CVE Advisory https://securelayer7.net/lab/cve-2026-64679-atlantis-workspace-path-traversal SecureLayer7 en 2026-08-21T21:24:48.031Z CVE-2026-64679: Atlantis Workspace Path Traversal Allows Out-of-Bounds Directory Operations CVE Advisory https://securelayer7.net/lab/cve-2026-68508-hydra-core-instantiate-code-injection SecureLayer7 en 2026-08-21T21:11:32.435Z CVE-2026-68508: hydra-core Unsafe Instantiation Code Injection CVE Advisory https://securelayer7.net/lab/cve-2026-76904-geotools-postgis-jsonarraycontains-sql-injection SecureLayer7 en 2026-08-21T20:29:07.192Z CVE-2026-76904: GeoTools gt-jdbc-postgis Unauthenticated SQL Injection via jsonArrayContains CVE Advisory https://securelayer7.net/lab/cve-2026-76905-kin-openapi-multipart-nil-pointer-dos SecureLayer7 en 2026-08-21T21:23:42.998Z CVE-2026-76905: kin-openapi openapi3filter Nil-Pointer Panic via Malformed multipart/form-data CVE Advisory https://securelayer7.net/lab/cve-2026-77354-kin-openapi-deepobject-memory-exhaustion SecureLayer7 en 2026-08-21T21:17:17.937Z CVE-2026-77354: kin-openapi Uncontrolled Memory Allocation via deepObject Query Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-77413-jsonata-arbitrary-code-execution-prototype-lookup SecureLayer7 en 2026-08-21T21:15:58.897Z CVE-2026-77413: jsonata Arbitrary Code Execution via Prototype Chain Escape CVE Advisory https://securelayer7.net/lab/cve-2026-77414-jsonata-code-injection-hasownproperty-bypass SecureLayer7 en 2026-08-21T21:10:16.473Z CVE-2026-77414: jsonata Arbitrary Code Execution via hasOwnProperty Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-77415-jsonata-code-injection-rce SecureLayer7 en 2026-08-21T21:09:07.907Z CVE-2026-77415: jsonata Arbitrary Code Execution via Crafted Expression CVE Advisory