267850 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-58041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement...
Linux Distros Unpatched Vulnerability : CVE-2026-56847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to...
PT-2026-66596
Name of the Vulnerable Software and Affected Versions Capsule versions prior to 0.13.8 Description The configuration admission webhook fails to validate the CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex variables...
PT-2026-85902
Package prometheus-node-exporter-fips version 1.6.1-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37...
PT-2026-66409
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description An incomplete fix exists in the HTTPS Agent where TLS session reuse allows the system to skip hostname verification across identity policies. Recommendations Update...
EUVD-2026-51254
A use-after-free vulnerability exists in SQLite 3.41 when the jsonBlobAppendNode function is invoked subsequent to sqlite3DbFree being called on the aBlob member of the Parse structure...
PT-2026-66604
Name of the Vulnerable Software and Affected Versions re2 versions prior to 1.25.2 Description The software validates lastIndex against the UTF-8 byte length of a subject but incorrectly uses it as a UTF-16 code-unit offset in the exec, test, match, replace, and split functions. When a non-ASCII...
PT-2026-66605
Name of the Vulnerable Software and Affected Versions re2 versions prior to 1.25.2 Description The String.prototype.match implementation fails to advance its native matching cursor in lib/match.cc when using a global RE2 pattern that can match an empty string. This behavior results in an infinite...
PT-2026-85905
Package node-problem-detector version 0.8.19-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...
Linux Distros Unpatched Vulnerability : CVE-2026-58042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this conditio...
nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw
A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...
nodejs: Information disclosure due to improper permission enforcement
A flaw was found in Node.js. The permission model enforcement, specifically related to process.report functionality, allows an attacker to write or overwrite files in locations outside of the intended secure paths. This vulnerability can lead to the disclosure of sensitive information or bypass t...
nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw
A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...
axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter
A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If...
sprinter (1.4.2), uranium (>=0.2.8, <=0.2.22) +1 more potentially affected by CVE-2026-13346 via pip (7.1.0)
pip PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - sprinter 1.4.2 - uranium =0.2.8, =0.2.22 - yt-formula-node 0.0.4 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...
MAL-2026-11171 Malicious code in @ai-agent-node/agent-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edd22e8454df2a9c10d47ea5c39560f9384598e7fb2a26b26b8f647fd5d2dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11173 Malicious code in @ai-agent-node/nodesql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd9860fa6b32249720b90f9ba4f48642cbd746fe04e701b05cba6eef2951671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11172 Malicious code in @ai-agent-node/createnode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88461b4fe3bc4e6e16f6dbabec2dd4acdf4eb2df6390170776629e5f955f13f4 @ai-agent-node/createnode ships a 12-line main module that, on require, fetches https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90 owner:...
Malicious code in @ai-agent-node/agent-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edd22e8454df2a9c10d47ea5c39560f9384598e7fb2a26b26b8f647fd5d2dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @ai-agent-node/createnode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88461b4fe3bc4e6e16f6dbabec2dd4acdf4eb2df6390170776629e5f955f13f4 @ai-agent-node/createnode ships a 12-line main module that, on require, fetches https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90 owner:...