GHSA-CWC6-73J8-3QM6 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-9PWP-9QQC-PR26 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-4HC3-69F9-4WFX vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-8763 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58061 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-8798 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-QP49-QGX5-5M26 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-PXW2-F34F-XJVR vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-4MWX-9CGQ-H2WP vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58063 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-13586 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-J295-77C3-9FRF vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

GHSA-3Q78-FQJ5-G3MC vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58062 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58060 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-14682 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

Malicious code in devplatform-vite-plugin-gle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ba08fb4c9c52336f51b45ebe9089ba0b441f3da79529ac1c56f146d71861b6 On require, support.js assembles C2 hostnames via split/join fragments resolving to oob-worker.cf100-416.workers.dev, cf103-070.workers.dev,...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

Malicious code in beaver-ui-smart-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aeae07ad8c21acdd73d30a24723d30ef468f03a3412e21ea4bf726f27c2f12 The package is advertised as a React UI filter component but on require of index.js loads adapter.js, which assembles remote hostnames from split...

Malicious code in bnpl-blocks-atom-bnpl-integrations-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2708bb1921034553386778769eccfeb8858cc65d8890b438cb7dc07bfb1eb60 On require, the package's main entry loads ext.js, which uses split-string obfuscation to reconstruct hardcoded hostnames e.g...