MAL-2026-11 Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

GCVE-1-2026-0002

creationtimestamp| type| source ---|---|--- 2026-01-02 20:06:08+00:00| seen| https://infosec.exchange/users/adulau/statuses/115827301939252661...

GCVE-1-2026-0001

creationtimestamp| type| source ---|---|--- 2026-01-02 10:21:44+00:00| seen| https://vulnerability.circl.lu/bundle/2f22146f-462c-4841-9bff-17d8f791e1c2...

DLA-4431-1 gimp - security update

Bulletin has no description...

[SECURITY] Fedora 43 Update: delve-1.26.0-1.fc43

Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...

PT-2026-21390

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description GIMP installations are susceptible to remote code execution due to a heap-based buffer overflow present in the HDR file parsing functionality. Exploitation requires user interaction with malicio...

PT-2026-21391

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of HDR files. This occurs because the software fails to properly validate the length of user-supplied data before copying it to a heap-base...

PT-2026-28317

Name of the Vulnerable Software and Affected Versions Node.js versions 20.x through 25.x Description A flaw exists in Node.js HMAC verification where a non-constant-time comparison is used when validating signatures provided by a user. This could potentially leak timing information proportional t...

DLA-4430-1 net-snmp - security update

Bulletin has no description...

PT-2026-28318

Name of the Vulnerable Software and Affected Versions Node.js versions 20 through 25 Description A memory leak can occur in Node.js HTTP/2 servers when a client sends WINDOW UPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The...

CVE-2023-52969 affecting package mariadb for versions less than 10.6.24-1

CVE-2023-52969 affecting package mariadb for versions less than 10.6.24-1. A patched version of the package is available...

CVE-2025-13699 affecting package mariadb for versions less than 10.6.24-1

CVE-2025-13699 affecting package mariadb for versions less than 10.6.24-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14177 affecting package php for versions less than 8.1.34-1

CVE-2025-14177 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1

CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14178 affecting package php for versions less than 8.1.34-1

CVE-2025-14178 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14180 affecting package php for versions less than 8.1.34-1

CVE-2025-14180 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-13912 affecting package mariadb for versions less than 10.11.15-1

CVE-2025-13912 affecting package mariadb for versions less than 10.11.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-52970 affecting package mariadb for versions less than 10.11.15-1

CVE-2023-52970 affecting package mariadb for versions less than 10.11.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-13699 affecting package mariadb for versions less than 10.11.15-1

CVE-2025-13699 affecting package mariadb for versions less than 10.11.15-1. An upgraded version of the package is available that resolves this issue...