SourceHut

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenSep 24, 2026
Last mentioned6d ago

Timeline

2 articles · newest first

SourceHut Registration Bypass When Disabled (CVE-2026-121728)

A logic bug introduced in 2021 allows registration even when disabled in SourceHut versions 0.56.11-0.88.9 if SMTP is configured.

Lobsters · securityNov 5, 18:34 UTC · 6d agoVulnerabilityCVE-2026-121728

SourceHut account takeover via build logs (XSS in ansi2html.py)

Stored XSS in SourceHut's ansi2html can run script from CI build logs and enable account takeover.

Lobsters · securitySep 24, 20:38 UTC · Sep 24, 2026Vulnerability1 · 1 read

Related CVEs

by mentions

CVE-2026-1217286.9
Authorization bypass in SourceHut meta.sr.ht before 0.89.0
published 7d agoSourceHut meta.sr.ht

Appears with

builds.sr.htproduct · 1
ansi2htmlproduct · 1
SourceHutorganization · 1
VulnCheckorganization · 1

Entities are extracted by the model from each article. First seen Sep 24, 2026, last mentioned 6d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.