Vulnerabilities
Check LocalAI Gallery Settings to Stop Server-Side Request Forgery Attack
Critical flaw in LocalAI versions allows attackers to redirect internal requests via gallery configurations, exposing sensitive metadata.
NVD
Everything Shell Bulletin has reported about NVD: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch Google Agent Mesh to Stop Unauthenticated Remote Service Access
A critical flaw in early Google SAM builds allows remote peers to bypass security checks and trigger backend services without valid credentials.
Vulnerabilities
Update joserfc Libraries to Block Signature Forgery Attacks
A critical flaw in older joserfc versions allows attackers to forge digital signatures without keys, risking data integrity for users of the Python library.
Vulnerabilities
Update Kalles CMS Past 1.1.7.1 to Fix Critical 9.8-Scored PHP Object Injection
The NVD rates CVE-2026-62076 as critical with a 9.8 score, affecting all Kalles CMS versions up to 1.1.7.1 through PHP object injection.