https://securelayer7.net/lab/cve-2026-53728-medplum-external-auth-open-redirect-code-leak SecureLayer7 en 2026-08-17T13:49:12.059Z CVE-2026-53728: @medplum/core Open Redirect via Prefix-Matched Redirect URI in External Auth Callback CVE Advisory https://securelayer7.net/lab/cve-2026-55158-conflibot-command-injection-branch-name-pull-request-target SecureLayer7 en 2026-08-17T13:50:52.266Z CVE-2026-55158: conflibot OS Command Injection via Pull Request Branch Name CVE Advisory https://securelayer7.net/lab/cve-2026-64859-new-api-user-list-access-token-disclosure SecureLayer7 en 2026-08-17T16:55:04.359Z CVE-2026-64859: new-api User List API Leaks Root Access Token CVE Advisory https://securelayer7.net/lab/cve-2026-64868-new-api-webhook-dos-unbounded-body SecureLayer7 en 2026-08-17T16:52:06.431Z CVE-2026-64868: new-api Unauthenticated Webhook DoS via Unbounded Body Read CVE Advisory https://securelayer7.net/lab/cve-2026-68518-glances-action-template-sanitizer-bypass-cross-field-command-inje SecureLayer7 en 2026-08-17T16:49:22.549Z CVE-2026-68518: glances Action-Template Sanitizer Bypass via Cross-Field Shell-Operator Reconstruction CVE Advisory https://securelayer7.net/lab/cve-2026-68519-glances-disable-config-exec-bypass-alert-action-command-injection SecureLayer7 en 2026-08-17T17:30:37.651Z CVE-2026-68519: Glances --disable-config-exec Bypass via On-Alert Action OS Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-71479-new-api-integer-overflow-quota-billing-self-credit SecureLayer7 en 2026-08-17T16:50:43.760Z CVE-2026-71479: new-api Integer Overflow in Quota Billing Yields Negative Charges CVE Advisory https://securelayer7.net/lab/cve-2026-71491-sqlparse-quadratic-dos-group-comments SecureLayer7 en 2026-08-17T17:29:06.190Z CVE-2026-71491: sqlparse Quadratic DoS in group_comments CVE Advisory