{"vulnerability": "cve-2026-6732", "sightings": [{"uuid": "94c0bbb7-9e33-4f3d-8499-135707504730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67327", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117028396900490515", "content": "CVE-2026-67327 - Account takeover in Better-Auth via pre-account hijacking. Affects magic-link/email-OTP when open registration is on. CVSS 8.3. Unpatched - disable open registration now. #CVE #BetterAuth #infosec\nhttps://www.valtersit.com/cve/CVE-2026-67327/", "creation_timestamp": "2026-08-02T23:00:24.463217Z"}, {"uuid": "e7812a7e-ee23-419b-9ff2-08e9130e057a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67327", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22emobp22t", "content": "\ud83d\udfe0 CVE-2026-67327 - High (8.3)\n\nbetter-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T18:00:40.396926Z"}, {"uuid": "c5b01676-6945-40b8-b0f7-5a70fddbd75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67328", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22etaago2p", "content": "\ud83d\udfe0 CVE-2026-67328 - High (8.1)\n\n@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67328/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T18:00:46.547388Z"}, {"uuid": "cdd15e9b-3337-4c08-9a4d-031036fa4435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msapdxxh6u2f", "content": "CVE-2026-67325 - python-git\nGitPython, a Python library for interacting with Git repositories, has a security weakness that allows attackers to bypass safety checks. This could potentially allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythongit #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-04T09:32:04.652063Z"}, {"uuid": "c7b57b27-ced7-4cd8-b71f-65ae0a8410e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67322", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3pco2k2x", "content": "\ud83d\udfe0 CVE-2026-67322 - High (7.5)\n\nGitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67322/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T20:00:57.232183Z"}, {"uuid": "28441d2c-71f7-4ebd-931a-75cedfae1f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67323", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3vk3tf2z", "content": "\ud83d\udfe0 CVE-2026-67323 - High (8.4)\n\nGitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67323/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T20:01:03.278427Z"}, {"uuid": "608b3f13-87a0-4ac0-a3d1-04fdbcaf54a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5odridpg2u", "content": "CVE-2026-67325 - gitpython\nAll versions of GitPython, including the latest, are vulnerable to a command injection attack if an attacker can provide a keyword argument with a name that starts with an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitpython #pip #CVE #infosec", "creation_timestamp": "2026-08-03T04:36:04.671466Z"}, {"uuid": "85454d4c-707a-4723-86b0-f9dc2eb884b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22", "content": "CVE-2026-67324 - gitpython\nAn attacker can bypass security settings in GitPython by passing specific, joined option forms to a clone command, potentially executing malicious helper commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitpython #gitpythondevelopers #CVE #infosec", "creation_timestamp": "2026-08-01T20:16:05.847844Z"}, {"uuid": "601570aa-07d0-4a49-8e0b-577a8cb0f4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67324", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t", "content": "\ud83d\udd34 CVE-2026-67324 - Critical (9.8)\n\nGitPython 3.1.50 fails to recognize joined short-option forms such as -u (the short form of --upl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67324/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T21:00:43.841084Z"}, {"uuid": "7da371f1-f42a-42df-8173-e3c336763ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67325", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egscm4b2z", "content": "\ud83d\udfe0 CVE-2026-67325 - High (8.8)\n\nGitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67325/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T21:00:50.076666Z"}, {"uuid": "4a0b96f7-1781-42dc-8521-27eaad53a307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67327", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iruraca22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67327 \u0432 better-auth: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u0447\u0435\u0440\u0435\u0437 Magic-Link \u0438 Email-OTP\n\n\n\nhttps://kripta.biz/posts/CAFB1AE4-C303-4D1C-B08B-5C9F1CB9EFA5", "creation_timestamp": "2026-08-01T22:18:36.313658Z"}, {"uuid": "73386456-c1e0-40c7-ac3e-d4a1a71a9aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67327", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2isoxayo22", "content": "CVE-2026-67327: \u05e4\u05e8\u05d9\u05e6\u05ea \u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea Magic-Link \u05d5-Email-OTP \u05d1-better-auth - \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea?\n\n\n\nhttps://khesef.xyz/posts/10F88ABF-9995-4593-AD35-2F62C8C08858", "creation_timestamp": "2026-08-01T22:19:08.130088Z"}, {"uuid": "1093fea3-9eb8-4f29-a03d-ee575fec3b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67325", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ittk7ee2d", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67325 \u0432 GitPython: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u043f\u0446\u0438\u0438 Git\n\n\n\nhttps://kripta.biz/posts/E7A084D9-8D90-4436-A10A-3904AD733F9A", "creation_timestamp": "2026-08-01T22:19:42.319562Z"}, {"uuid": "6f6032ad-e9f9-4ba9-b6d3-0f60f33da682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67324", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ixxvjm22v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67324 \u0432 GitPython: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\n\n\n\nhttps://kripta.biz/posts/A269907D-360B-414D-9409-18DA25C86003", "creation_timestamp": "2026-08-01T22:22:01.010376Z"}, {"uuid": "4fac9863-c34b-4268-865d-6fba441a7ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67328", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jolkde62v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67328: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 SSO \u0432 @better-auth/sso\n\n\n\nhttps://kripta.biz/posts/2D54DB29-22DD-4DD9-BD2A-ECD7DF970A16", "creation_timestamp": "2026-08-01T22:34:40.212259Z"}, {"uuid": "29eaf763-935a-4abc-b207-c41cce669f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67328", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2joybjqp2p", "content": "CVE-2026-67328: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-@better-auth/sso \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e9\u05ea\u05dc\u05d8\u05d5\u05ea \u05e2\u05dc \u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d3\u05e8\u05da SSO\n\n\n\nhttps://khesef.xyz/posts/098CFC65-F95A-4C13-85E2-FD8D9E525E6A", "creation_timestamp": "2026-08-01T22:34:53.060594Z"}, {"uuid": "ae8e4b14-07f8-4519-9b52-1fe48322c144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67329", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lwauabc2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67329 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 @better-auth/stripe: \u0440\u0438\u0441\u043a\u0438, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EAAF38B6-A334-4491-A39C-34F650EA783C", "creation_timestamp": "2026-08-01T23:14:44.495664Z"}, {"uuid": "fe243c17-c288-440d-82c4-8090f2fad2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67329", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lx3rtmy2c", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67329 \u6f0f\u6d1e:@better-auth/stripe \u5b89\u5168\u98ce\u9669\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/171EAFE2-C153-42A7-9BBE-50C607272A90", "creation_timestamp": "2026-08-01T23:15:13.141199Z"}, {"uuid": "49e779f9-16e7-4045-8c00-2bbb9d116cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67329", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lwtkxdv2n", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth/stripe: \u05de\u05d4 \u05db\u05dc \u05de\u05e4\u05ea\u05d7 \u05d5\u05de\u05e9\u05ea\u05de\u05e9 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67329\n\n\n\nhttps://khesef.xyz/posts/F080F12A-E8E1-4E5F-9CA7-05548E26DE5F", "creation_timestamp": "2026-08-01T23:15:04.047921Z"}, {"uuid": "9455547a-1f10-4ef8-8bd7-5743dffd612b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67320", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67320-nella-libreria-axios", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-67320 che interessa Axios, nota libreria client http per l'interoperabilit\u00e0 tra ambienti browser e Node.js.", "creation_timestamp": "2026-08-03T16:00:39.769195Z"}, {"uuid": "781585ee-cb23-4703-aa2d-facfd186edbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6732", "type": "seen", "source": "https://bsky.app/profile/msw.bsky.social/post/3mmafccldts2j", "content": "Y'all, AI models seem to be *really good* at triaging vulnerabilities that are discovered with AI tooling!\n\nTry this prompt:\n> read gitlab.gnome.org/GNOME/libxml... and tell me if CVE-2026-6732 applies to github.com/libarchive/l...\n\n[...]\nConclusion\n  Not affected.", "creation_timestamp": "2026-05-19T22:01:19.451003Z"}, {"uuid": "7d1c719c-ac17-40a6-979b-a25edaea9fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67320", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67320-nella-libreria-axios", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-67320 che interessa Axios, nota libreria client http per l'interoperabilit\u00e0 tra ambienti browser e Node.js.", "creation_timestamp": "2026-08-04T01:00:34.690115Z"}, {"uuid": "7c692256-708b-4190-a348-95ff24ae8384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschofo5mq2z", "content": "CVE-2026-67325 - python-git\nA security flaw in GitPython allows attackers to trick the software into running malicious Git commands. This could lead to unauthorized actions being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythongit #canonical #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:20:04.727238Z"}, {"uuid": "0cfa0529-a4e6-4d27-a5d8-163845f16f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschrxuu5x2a", "content": "CVE-2026-67324 - python-git\nAn attacker can use a specific option to bypass GitPython's security check and execute arbitrary commands during a Git clone. This affects applications using\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythongit #canonical #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:22:03.825324Z"}]}