175 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-091420)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091420 advisory. ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as...
alpaca-farm (>=0.1.10, <=0.2.0) potentially affected by CVE-2026-69112 via accelerate (0.20.0)
accelerate PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - alpaca-farm =0.1.10, =0.2.0 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...
alpaca-farm (>=0.1.10, <=0.2.0) potentially affected by CVE-2026-69112 via accelerate (0.20.0)
accelerate PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - alpaca-farm =0.1.10, =0.2.0 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...
ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)
transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...
ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0, <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0, <=2.2.0) +81 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-jms (>=3.0.0, <=4.14.6)
org.apache.camel:camel-jms MAVEN version =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =1.0, =hyte-mq-4.3.7.hyte-43072, =hyte-mq-4.3.7.hyte-43072, =4.4.11.hyte-26354 and more Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...
ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0, <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0, <=2.2.0) +28 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-activemq (>=3.0.0, <=4.14.6)
org.apache.camel:camel-activemq MAVEN version =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =6.0.0, =1.6.0, =0.1.0, =0.11.5 and more Source cves: CVE-2026-40860 Source advisory: GHSA-M5VH-3FW5-5WGH...
BIT-NGINX-GATEWAY-2021-3618
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...
EUVD-2025-117161
Malicious code in private-violet-alpaca npm...
EUVD-2025-104082
Malicious code in littlealpacaz3n npm...
EUVD-2025-103395
Malicious code in obedientalpacaz3n npm...
EUVD-2025-95088
Malicious code in silkyalpacaz3n npm...
Malicious code in identical_alpaca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f95f5a55a303acf898b70ba3061882d632019e27c143439902615b2979551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-106244
Malicious code in changingalpacaz3n npm...
EUVD-2025-106346
Malicious code in boredalpacaz3n npm...
EUVD-2025-74232
Malicious code in smoggyalpacateal-48 npm...
EUVD-2025-75624
Malicious code in slightalpaca-biggestdev npm...
EUVD-2025-76874
Malicious code in fatalalpaca-gooddev npm...
EUVD-2025-75606
Malicious code in smartalpaca-appteadev npm...