Linux Distros Unpatched Vulnerability : CVE-2026-67315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0...

Linux Distros Unpatched Vulnerability : CVE-2026-71190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The qdtext...

PT-2026-68329

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses using http.ReadResponse over an unrestricted buffered reader. This allows a malicious or compromised proxy, or an...

PT-2026-68992

Summary The shared HTTP CONNECT helper parses a proxy response with http.ReadResponse over an unrestricted buffered reader. The production helper accepted a valid response containing a 2 MiB header in three consecutive runs. A malicious or compromised configured proxy, or an active on-path actor...

OnionHop v3.7.8

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

Malicious code in streak-math-abz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eddf7b9d6d5331bdc1c1afe40913620b219afcc06a705aef3fe547ddc5cf25 The package advertises itself as a JavaScript day-math helper but its ESM main entry dist/index.mjs unconditionally spawns a bundled Linux x8664 ELF...

MAL-2026-11548 Malicious code in streak-math-abz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eddf7b9d6d5331bdc1c1afe40913620b219afcc06a705aef3fe547ddc5cf25 The package advertises itself as a JavaScript day-math helper but its ESM main entry dist/index.mjs unconditionally spawns a bundled Linux x8664 ELF...

CVE-2026-16728

A flaw was found in undici. A malicious or faulty upstream server could send a partial response with incorrect length information. When undici's retry interceptor processes this, it may create a response body with a length that does not match the original Content-Length header. This can lead to...

Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

MAL-2026-11527 Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, commercial-gitlab-rails-ee, sqlpad, unleash-proxy, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard,...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, sqlpad, unleash-proxy, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard, graalvm, npm, prism, code-server, unleash-fips, lerna,...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, commercial-gitlab-rails-ee, sqlpad, unleash-proxy, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard,...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, sqlpad, unleash-proxy, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard, graalvm, npm, prism, code-server, unleash-fips, lerna,...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, sqlpad, unleash-proxy, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard, graalvm, npm, prism, code-server, unleash-fips, lerna,...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, sqlpad, unleash-proxy, kubeflow-pipelines, opensearch-dashboards-fips, langfuse, saf, pulumi, actions-runner, unleash, wazuh-dashboard, graalvm, npm, prism, code-server, unleash-fips, lerna,...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: dotstatsuite-supercore, opensearch-dashboards, langfuse-fips, vitess, pelias-api, wazuh-dashboard-fips, jupyter-base-notebook, kubeflow-katib, commercial-gitlab-rails-ee, authentik, sqlpad, unleash-proxy, serve, azurite, commercial-gitlab-rails-ee-fips,...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, vitess, librechat, jupyter-base-notebook, commercial-gitlab-rails-ee, unleash-proxy, serve, commercial-gitlab-rails-ee-fips, opensearch-dashboards-fips, langfuse, argo-workflows, saf, gemini-cli, nextcloud-server, arangodb,...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, vitess, librechat, jupyter-base-notebook, commercial-gitlab-rails-ee, unleash-proxy, serve, commercial-gitlab-rails-ee-fips, opensearch-dashboards-fips, langfuse, argo-workflows, saf, gemini-cli, nextcloud-server, arangodb,...

GHSA-RGW5-RVV9-X895 vulnerabilities

Vulnerabilities for packages: dotstatsuite-supercore, opensearch-dashboards, langfuse-fips, vitess, pelias-api, wazuh-dashboard-fips, jupyter-base-notebook, kubeflow-katib, commercial-gitlab-rails-ee, authentik, sqlpad, unleash-proxy, serve, azurite, commercial-gitlab-rails-ee-fips,...