Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 20h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
10,578
incidents tracked
1,686
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
California lawmakers unanimously pass Linux exemption from age-verification law
UNKNOWNHex
Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions
Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions
UNKNOWNHex
JSON path injection via unescaped get_path segments in AshSqlite
JSON path injection via unescaped get_path segments in AshSqlite
UNKNOWNHex
Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc
Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc
UNKNOWNHex
Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking
Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking
UNKNOWNHex
Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail
Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail