vantage6-algorithm-store (4.12.3rc1), vantage6-node (4.12.3rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.12.3rc1)

vantage6 PYPI version 4.12.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.12.3rc1 - vantage6-node 4.12.3rc1 - vantage6-server 4.12.3rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.0rc2), vantage6-node (4.13.0rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.0rc2)

vantage6 PYPI version 4.13.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0rc2 - vantage6-node 4.13.0rc2 - vantage6-server 4.13.0rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.0rc4), vantage6-node (4.13.0rc4) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.0rc4)

vantage6 PYPI version 4.13.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0rc4 - vantage6-node 4.13.0rc4 - vantage6-server 4.13.0rc4 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.1), vantage6-node (4.13.1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.1)

vantage6 PYPI version 4.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.1 - vantage6-node 4.13.1 - vantage6-server 4.13.1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-algorithm-store (4.13.2rc1), vantage6-node (4.13.2rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.2rc1)

vantage6 PYPI version 4.13.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.2rc1 - vantage6-node 4.13.2rc1 - vantage6-server 4.13.2rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.3rc2), vantage6-node (4.13.3rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3rc2)

vantage6 PYPI version 4.13.3rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc2 - vantage6-node 4.13.3rc2 - vantage6-server 4.13.3rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.3), vantage6-node (4.13.3) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3)

vantage6 PYPI version 4.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3 - vantage6-node 4.13.3 - vantage6-server 4.13.3 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-algorithm-store (4.13.4rc1), vantage6-node (4.13.4rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.4rc1)

vantage6 PYPI version 4.13.4rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.4rc1 - vantage6-node 4.13.4rc1 - vantage6-server 4.13.4rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.13.4), vantage6-node (4.13.4) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.4)

vantage6 PYPI version 4.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.4 - vantage6-node 4.13.4 - vantage6-server 4.13.4 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-algorithm-store (4.15.0rc1), vantage6-node (4.15.0rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc1)

vantage6 PYPI version 4.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc1 - vantage6-node 4.15.0rc1 - vantage6-server 4.15.0rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.0rc2), vantage6-node (4.15.0rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc2)

vantage6 PYPI version 4.15.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc2 - vantage6-node 4.15.0rc2 - vantage6-server 4.15.0rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.1rc1), vantage6-node (4.15.1rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.1rc1)

vantage6 PYPI version 4.15.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.1rc1 - vantage6-node 4.15.1rc1 - vantage6-server 4.15.1rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.15.1), vantage6-node (4.15.1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.1)

vantage6 PYPI version 4.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.1 - vantage6-node 4.15.1 - vantage6-server 4.15.1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

Malicious code in mutex-plus (npm)

Source: amazon-inspector a64e56572436d2ca889aa389887584bbeb3e67df09f30df6773cbfafc0188ca3 lib/Mutex.js contains a hidden branch inside runExclusive that, when a callback object carries a meta.jobId whose sha256 equals a hardcoded value...

Malicious code in mutex-core (npm)

Source: amazon-inspector 8c015af803d9d4adc7d0578dc27795ebaef48e6ce25e9bf715b54af1e4991999 The package is published under a name resembling the popular async-mutex library and, beyond advertised mutex functionality, contains a staged loader. lib/Mutex.js's Mutex.prototype.runExclusive checks wheth...

Malicious code in matrixflow-js (npm)

Source: amazon-inspector 45393245d9a2fca558d1bcb8b7c9d5263c16ff63e9a038a51169b720c85e1352 [email protected] is a typosquat/repackage of ml-matrix the UMD global is mlMatrix; homepage matrixflow-js.github.io does not correspond to the real ml-matrix project. Its main module matrix.js routes...

BIT-ELASTICSEARCH-2026-72684 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the...

Malicious code in gaarf-node-bq (npm)

Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an empty noop and the package ships no real functionality. Its...

Malicious code in gaarf-node (npm)

Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package name, npm lifecycle event and POSTs them as JSON to the...

MAL-2026-14239 Malicious code in gaarf-node-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an...