Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 21h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
10,640
incidents tracked
1,686
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
Flock Safety's controversial CEO just got a taste of his own medicine
UNKNOWNHex
MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header
MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header
UNKNOWNHex
Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
UNKNOWNHex
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
UNKNOWNHex
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass
UNKNOWNHex
AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error
AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error