255378 matches found
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: code-server, gitlab-rails-ce-fips, npm, prism, actions-runner, opensearch-dashboards, kibana, wazuh-dashboard-fips, opensearch-dashboards-fips, pulumi, homepage, kubeflow-centraldashboard, lerna, sqlpad, gitlab-rails-ce, saf, graalvm, wazuh-dashboard...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: code-server, gitlab-rails-ce-fips, npm, prism, actions-runner, opensearch-dashboards, kibana, wazuh-dashboard-fips, opensearch-dashboards-fips, pulumi, homepage, kubeflow-centraldashboard, lerna, sqlpad, gitlab-rails-ce, saf, graalvm, wazuh-dashboard...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: code-server, gitlab-rails-ce-fips, npm, prism, actions-runner, opensearch-dashboards, kibana, wazuh-dashboard-fips, opensearch-dashboards-fips, pulumi, kubeflow-centraldashboard, lerna, sqlpad, gitlab-rails-ce, saf, graalvm, wazuh-dashboard...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: code-server, gitlab-rails-ce-fips, npm, prism, actions-runner, opensearch-dashboards, kibana, wazuh-dashboard-fips, opensearch-dashboards-fips, pulumi, homepage, kubeflow-centraldashboard, lerna, sqlpad, gitlab-rails-ce, saf, graalvm, wazuh-dashboard...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: pulumi, code-server, lerna, npm, prism, kubeflow-centraldashboard, saf, sqlpad...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: pulumi, code-server, lerna, npm, prism, kubeflow-centraldashboard, saf, sqlpad...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: pulumi, code-server, lerna, npm, prism, kubeflow-centraldashboard, saf, sqlpad...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: pulumi, code-server, lerna, npm, prism, kubeflow-centraldashboard, saf, sqlpad...
Malicious code in react-tabulix-virtual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...
SUSE CVE-2026-64022
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the la...
SUSE CVE-2026-64096
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orignode RCU release batadvmcastpurgeorig removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses...
SUSE CVE-2026-64123
In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb through hsrgetnextnode and hsrgetnodedata, but RTMDELLINK teardown remov...
SUSE CVE-2026-64161
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32 failure inside icssmpruethprobe returns without putting ethportsnode, which was acquired before the foreachchildofnode loop. Drop it before...
Malicious code in react-tabulix-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...
MAL-2026-10987 Malicious code in react-tabulix-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...
ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10843 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10689 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-44003 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...