6885 matches found
RockyLinux 9 : webkit2gtk3 (RLSA-2026:42062)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42062 advisory. Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +316 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.15)
@hono/node-server NPM version =1.0.2, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =1.0.25-beta.0, =0.0.1, =1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONONODESERVER-18170326...
EUVD-2026-46151
Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey function in util.js. An attacker can modify the JavaScript prototype chain by supplying a crafted property path containing special keys such as proto...
@adobe/helix-docx2md (1.9.29), @adobe/helix-importer (>=3.4.141, <=3.4.143) +33 more potentially affected by CVE-2026-59868 via js-yaml (>=5.0.0, <=5.1.0)
js-yaml NPM version =5.0.0, =3.4.141, =2.2.62, =1.0.8, =0.2.12, =0.2.12, =0.2.12, =0.2.13, =0.2.12, =0.2.16, =0.2.14, =0.2.12, =0.2.17 and more Source cves: CVE-2026-59868 Source advisory: OSV:GHSA-G796-FGMG-93MV...
GHSA-G796-FGMG-93MV js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
Impact This is the same report as for v3/v4, but with lower severity, because in v5, merge is off by default When merge keys 1s doc size 100K js import performance from 'node:perfhooks' import Buffer from 'node:buffer' import load, YAML11SCHEMA from 'js-yaml' const n = Numberprocess.argv2 || 4000...
02.aula (1.0.0), 0xrtest (1.0.0) +10472 more potentially affected by CVE-2026-59869 via js-yaml (>=4.0.0, <=4.2.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21451 more potentially affected by CVE-2026-59869 via js-yaml (>=3.0.0, <=3.14.2)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2026-59869 Source advisory: OSV:GHSA-52CP-R559-CP3M...
@adobe/aem-cli (>=16.21.1, <=16.21.2), @adobe/helix-docx2md (>=1.9.29, <=1.9.30) +49 more potentially affected by CVE-2026-59870 via js-yaml (>=5.0.0, <=5.2.0)
js-yaml NPM version =5.0.0, =16.21.1, =1.9.29, =3.4.141, =7.1.20, =2.2.62, =1.5.3, =1.0.8, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260630092247, =0.0.0-next-20260824173136 and more Source cves: CVE-2026-59870 Source advisory: OSV:GHSA-724G-MXRG-4QVM...
GHSA-3JXR-9VMJ-R5CP brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
Summary brace-expansion's expand exhibits exponential-time - O2ⁿ - behavior in the number of consecutive non-expanding groups. A short, all-ASCII input 90 bytes/30 groups blocks the calling thread for minutes; a slightly longer input hangs it effectively indefinitely. Because the dominant consume...
nodejs: Node.js: Certification validation bypass in TLS host verification
A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...
Malicious code in @dxcl/user-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10878 Malicious code in @dxcl/transaction-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @dxcl/transaction-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10877 Malicious code in @dxcl/log-function-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @dxcl/log-function-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @dxcl/http-common-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @dxcl/fund-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10874 Malicious code in @dxcl/fund-js (npm)
--- -= Per source details. Do not edit below this line.=-...