Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053282 advisory. In the Linux kernel, the following vulnerability has been resolved: resource: fix regionintersects vs addmemorydrivermanaged On a system with CXL memory, the resourc...

Malicious Package

Overview vitest-cli-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-15870 Malicious code in vitest-cli-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...

Malicious code in vitest-cli-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...

CVE-2026-84736

Eclipse aeriOS (current development version, no official release published) has a vulnerability in its Federator component where TLS certificate validation is disabled by default for outbound HTTPS connections. When the TLS_CERTIFICATE_VALIDATION environment variable is unset or set to false, the...

CVE-2026-80253

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

CVE-2026-80253

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

CVE-2026-80253

CVE-2026-80253 is an improper physical access control flaw in ShizenBox2 (dev-conf) . An attacker with physical access to the device can execute bootloader commands without authentication , leading to high impact on confidentiality, integrity, and availability. The vulnerability is rated 6.8 (Med...

CVE-2026-80253

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

PT-2026-90881

In the Linux kernel, the following vulnerability has been resolved: af packet: Don't send zero-byte data in tpacket snd. syzbot reported a WARNING in dev queue xmit triggered via tpacket snd: skb assert len WARNING: at include/linux/skbuff.h:2753 skb assert len WARNING: at dev queue...

PT-2026-84971

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

CVE-2026-80253: Improper Physical Access Control

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

PT-2026-90887

In the Linux kernel, the following vulnerability has been resolved: net: remove CAP SYS RAWIO zero-padding in dev validate header dev validate header reads dev-hard header len directly when zero-padding short link layer headers for CAP SYS RAWIO holders: if capableCAP SYS RAWIO memsetll header +...

Malicious Package

Overview armada-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview chromatitle-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-15814 Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

Malicious code in chromatitle-dev (npm)

The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...

@pixui-dev/inflight-report (>=0.0.7-inflight.3, <=0.1.0) potentially affected by CVE-2026-84373 via vitest (5.0.0-beta.5)

vitest NPM version 5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on vitest and may be impacted: - @pixui-dev/inflight-report =0.0.7-inflight.3, =0.1.0 Source cves: CVE-2026-84373 Source advisory: MEND:CVE-2026-84373...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.

Red Hat OpenShift Dev Spaces 3.30.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.30 release is based on...

CVE-2026-80703

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with access to /dev/kfd could exploit a missing authorization check to terminate another process's active Graphics Processing Unit GPU debug session. This could lead to a denial of service for other users attempting to debu...