Astra Linux – Vulnerability in Firefox and Thunderbird

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have led to an out-of-bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS protections through a crafted HTML page. Chrome security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox URL bar via a crafted HTML page...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs in Thunderbird 91.7. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have...

Astra Linux – Vulnerability in Firefox

Under unusual circumstances, selecting text may cause text selection caching to behave incorrectly, resulting in a crash. This vulnerability affects Firefox versions less than 99...

hermes-decomp v0.2.3

Rust decompiler for Hermes bytecode .hbc, the JS engine behind React Native. Supports HBC 40 to 99. Install Pre-built binaries Linux / macOS / Windows from Releases or Actions: Asset suffix| Platform ---|--- linux-x8664 / linux-arm64| Linux macos-arm64 / macos-x8664| macOS windows-x8664| Windows...

Denial Of Service (DoS)

Spring AMQP is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of a malicious AMQP message that can terminate the entire consumer JVM using System.exit99, which allows an attacker to cause complete availability loss for all workloads running in the affected...

CVE-2026-59275

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

PT-2026-82416

Name of the Vulnerable Software and Affected Versions Spring AMQP version 4.1.0 Spring AMQP versions 4.0.0 through 4.0.4 Spring AMQP versions 3.2.0 through 3.2.12 Spring AMQP versions 2.4.18 and earlier Description A single hostile AMQP message can cause the entire consumer JVM to terminate via a...

MAL-2026-14519 Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview array-shuffler-utils-99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview icha-99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview hariyono-99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in icha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e327738ff8b8bdea849fb0c835cbf2c86f7660bf6584548cb9d105b5ea85f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164976 Malicious code in rita-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8ed42a9ba35ae978d6f705ddb51c47258d6664734497f56f4154529be823ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5308f1e7710f142452317e49ffde11bc6a63d5c6cc0647e82b08162b4b87e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9784354a50a16c92efcdd9cc8f33ed91e9e625d019356be92e04a4eb5e449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156084 Malicious code in icha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e327738ff8b8bdea849fb0c835cbf2c86f7660bf6584548cb9d105b5ea85f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...