Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#oss-security — news, CVEs and analysis · ZeroHour

06:59 UTC· 7m ago

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#oss-security

13 stories this week · 42 this month · 42 in 6 months · mostly security

stories per day · 30 days

Related#mailing-list 9 #ai-slop 7 #gnupg 6 #linux 6 #opinion 6 #cve 5 #emacs 5 #kernel 5 #gpg 4 #incomplete-fix 4 #perl 4 #privilege-escalation 4 #arbitrary-code-execution 3 #open-source 3 #vulnerability 3 #xss 3 #ai-generated-content 2 #ansi2html 2

35 stories, newest first · one card per story

1–24 of 35← Prev1 / 2Next →

oss-security·13h ago

Re: CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

#cve-2026-100310 #libextractor #gnu

CVE-2026-100310

oss-security·1d ago

XSS vulnerability in <ansi2html-1.9.4

#xss #ansi2html #sourcehut

Vulnerability

oss-security·2d ago

CVE-2026-85491: Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

#perl #catalyst #authorization-bypass

CVE-2026-85491

oss-security·3d ago high

Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

#emacs #cve #arbitrary-code-execution

CVE-2026-96442

oss-security·4d ago

Re: Vulnerabilities in libheif and libde265

#libheif #libde265 #heif

Vulnerability

oss-security·5d ago

Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

#kernel #linux #local-privilege-escalation

Vulnerability

oss-security·5d ago

CVE-2026-75158: Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

#apache-airflow #cve-2026-75158 #authorization

CVE-2026-75158

oss-security·7d ago

Re: Suricata 8.0.7 released with 67 vulnerabilities fixed

#ids #ips #network-security

Vulnerability

1

oss-security·7d ago

Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

#abi #kernel #linux

Vulnerability

oss-security·7d ago

CVE-2026-82560: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

#denial-of-service #oss-security #perl

CVE-2026-82560

oss-security·7d ago

Re: Suricata 8.0.7 released with 67 vulnerabilities fixed

#ids #ips #network-security

Vulnerability

oss-security·8d ago

Vulnerabilities in libheif and libde265

#codec #heif #hevc

Vulnerability

oss-security·8d ago

Re: Removing dead code (was: Retrospective by 'gpg.fail' authors)

#dead-code #deprecation #gpg.fail

Industry

oss-security·8d ago

Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

#kernel #linux #local-privilege-escalation

Vulnerability

oss-security·9d ago

Re: Removing dead code (was: Retrospective by 'gpg.fail' authors)

#code-hygiene #dead-code #dejagnu

Research

oss-security·9d ago

Re: Retrospective by 'gpg.fail' authors

#format-string #gcc #gnupg

Vulnerability

oss-security·10d ago

Re: Retrospective by 'gpg.fail' authors

#ai-code-review #cryptography #gnupg

Research

oss-security·10d ago

Re: Retrospective by 'gpg.fail' authors

#gnupg #gpg #maintenance

Vulnerability

1

oss-security·10d ago

Re: Retrospective by 'gpg.fail' authors

#cryptography #gnupg #gpg

Research

oss-security·11d ago

Re: Retrospective by 'gpg.fail' authors

#build-hardening #compiler-warnings #gnupg

Vulnerability

2

oss-security·12d ago

Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback

#denial-of-service #disclosure #oss-security

Vulnerability

oss-security·12d ago

Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback

#disclosure #oss-security #ros

Vulnerability

oss-security·12d ago high

Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

#arbitrary-code-execution #cve-2024-53920 #emacs

CVE-2024-53920

oss-security·13d ago

Re: CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

#apache-storm #credential-disclosure #cve

CVE-2026-82434