Linux Distros Unpatched Vulnerability : CVE-2026-55584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSIALLOWED access-control check in readconfig.php trusts...

Malicious code in analytics-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8893c0594fed4d622c0e347b4e8f899d5b00e11c15fe31e09169a9fae8e82be package.json at line 11 declares a dependency whose key equals this package's own name analytics-web-client and whose source is a bare HTTPS URL...

MAL-2026-15526 Malicious code in analytics-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8893c0594fed4d622c0e347b4e8f899d5b00e11c15fe31e09169a9fae8e82be package.json at line 11 declares a dependency whose key equals this package's own name analytics-web-client and whose source is a bare HTTPS URL...

Malicious code in ir-annuities-client-authentication-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d813fc9c0831847a602c97803b7e53603edfb6acef4386e4cde2927c2a7a297 package.json declares a dependency whose key equals the package's own name ir-annuities-client-authentication-module and whose value is a plain HTTPS...

MAL-2026-15536 Malicious code in ir-annuities-client-authentication-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d813fc9c0831847a602c97803b7e53603edfb6acef4386e4cde2927c2a7a297 package.json declares a dependency whose key equals the package's own name ir-annuities-client-authentication-module and whose value is a plain HTTPS...

Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

MAL-2026-15545 Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

Malicious code in grafeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...

MAL-2026-15503 Malicious code in grafeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...

MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets

Summary A SQL injection is possible when the connector escapes Buffer parameters client-side under a multi-byte client character set whose trail-byte range overlaps the ASCII backslash 0x5C: big5, gbk, sjis, cp932, and gb18030. Under these charsets, an attacker-controlled lead byte can absorb the...

com.rocketfuel.sdbc:mariadb-jdbc_2.11 (>=2.0.2, <=3.0.0), com.rocketfuel.sdbc:mariadb-jdbc_2.12 (>=2.0.2, <=3.0.0) +84 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.5.9)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.rocketfuel.sdbc:mariadb-jdbc2.11 =2.0.2, =2.0.2, =2.8.0, =2.8.0, =3.0.6, =1.1.0,...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-55858 Source advisory: GHSA-XVR9-35CR-46V9...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

at.chrl:chrl-orm-spring-integration (1.1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.0.06) +4 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.2.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - at.chrl:chrl-orm-spring-integration 1.1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.03,...

com.sos-berlin:jobscheduler.engine (1.12.0), com.speedment:speedment-maven-plugin (>=3.0.3, <=3.0.5) +5 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.5.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.sos-berlin:jobscheduler.engine 1.12.0 - com.speedment:speedment-maven-plugin =3.0.3...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-55858 Source advisory: OSV:GHSA-XVR9-35CR-46V9...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +182 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-55858 Source advisory: OSV:GHSA-XVR9-35CR-46V9...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +399 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-55858 Source advisory: OSV:GHSA-XVR9-35CR-46V9...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.8.0), com.tmsps:ne4spring (>=1.6.6, <=999.0.0.0) potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.5.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.5.0, =1.6.6, =999.0.0.0 Source cves: CVE-2026-558...

io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=0.21.0, <=1.0.0), us.fatehi:schemacrawler-mariadb (>=14.08.01, <=14.08.02) potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.4.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-storage-mysql =0.21.0, =14.08.01, =14.08.02 Source...