CVE-2026-97182

A security vulnerability exists in halo-dev Halo versions up to 2.25.4/2.26.1 . The flaw is located within an unknown function in the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java belonging to the SpEL Handler component. This issue leads to i...

CVE-2026-97182 halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

CVE-2026-97182 halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

EUVD-2026-85859

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

Malicious Package

Overview vite-dev-launcher is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview helpersutils-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-97182: Improper Neutralization

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

VulnCheck KEV: CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the getdoc and updatedoc tools...

PT-2026-104895

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when commands are submitted. Target-core completes those commands asynchronously, so VHOST SET MEM TABLE can...

PT-2026-97982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands...

PT-2026-97890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra vip channel of parse function where the np variable is initialized from dev-of node without taking a reference. When endpoint parsing fails due to a malforme...

PT-2026-97790

Name of the Vulnerable Software and Affected Versions Halo versions 2.25.4 and 2.26.1 Description A remote flaw exists in the SpEL Handler component within the ReplyNotificationSubscriptionHelper.java file. This issue involves improper neutralization in an unknown function, which could allow a...

Linux Distros Unpatched Vulnerability : CVE-2026-88339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO...

Malicious code in vite-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac504b2228b7e2d5aab05aac8cb13072d87bc4f047f390d207c7712c7cdd123 The package presents as a Vite dev-server wrapper but its declared postinstall node./postinstall-run.cjs chains through...

MAL-2026-16474 Malicious code in vite-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac504b2228b7e2d5aab05aac8cb13072d87bc4f047f390d207c7712c7cdd123 The package presents as a Vite dev-server wrapper but its declared postinstall node./postinstall-run.cjs chains through...

MAL-2026-16465 Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

Malicious Package

Overview vite-dev-launcher is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview helpersutils-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...