MAL-2026-14017 Malicious code in bs58-33 (npm)

npm/bs58-33 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-33x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-33x as a runtime dependency declar...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-58080

creationtimestamp| type| source ---|---|--- 2026-08-04 14:00:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/da6t4qlq3pqql 2026-08-06 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msftw3zzfs22...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

CVE-2026-14169

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdebf67v27...

MozillaThunderbird-140.13.0-1.1 on GA media (moderate)

MozillaThunderbird-140.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11359-1 Rating: moderate Cross-References: CVE-2026-14899 CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356...

CVE-2026-64187

creationtimestamp| type| source ---|---|--- 2026-07-20 18:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wmsx27o23 2026-07-22 09:05:35+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr7xsn3gbl25 2026-07-22 09:05:37+00:00| seen|...

CVE-2026-16124

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

CVE-2026-16124 nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

PT-2026-60971

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/web shared.go of the component web fetch. Such manipulation leads to server-side request forgery. The attack can be launched...

CVE-2026-15696

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmllzp5fa25 2026-07-22 04:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ixjgjm62j...

CVE-2026-61454

creationtimestamp| type| source ---|---|--- 2026-07-11 14:33:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuzo3gme2w 2026-07-11 16:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2azlsnp27 2026-07-13 17:32:26+00:00| seen|...

CVE-2026-15291

creationtimestamp| type| source ---|---|--- 2026-07-10 18:40:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcsdod5q62s 2026-07-12 19:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhugxoekp2m...

PT-2026-56857

This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703. - CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a he...

CVE-2026-56808

creationtimestamp| type| source ---|---|--- 2026-06-30 10:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpitg3sgyo2w 2026-07-01 02:35:46+00:00| seen| https://jvn.jp/en/jp/JVN28979424...

CVE-2026-56395

creationtimestamp| type| source ---|---|--- 2026-06-21 17:20:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosuvtxh662t 2026-06-22 00:46:37+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnwsotj62v...

CVE-2026-12324

creationtimestamp| type| source ---|---|--- 2026-06-16 14:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofzdog3of2b 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-49780

creationtimestamp| type| source ---|---|--- 2026-06-15 21:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeadytsfx2a 2026-06-16 03:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moesmvn3m22n 2026-06-22 20:16:07+00:00| seen|...

CVE-2026-53661

creationtimestamp| type| source ---|---|--- 2026-06-11 17:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzr2bnmce25...

PT-2026-48599

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...