CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

EUVD-2026-85307

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross versions 1.0.0 through 2.x before 2.7.2 are vulnerable to a memory exhaustion denial of service. The albatross-console component fails to properly terminate when looping over its internal ring buffer (default 1024 lines). A user with permissions to send console subscription comman...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609: Allocation of Resources Without Limits or Throttling

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

Malicious code in labyrinth-albatross-opo606-project (npm)

The package labyrinth-albatross-opo606-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in kale-albatross-crn680-project (npm)

The package kale-albatross-crn680-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jittery-emerald-albatross (npm)

Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in glacier-albatross-kyy976-project (npm)

The package glacier-albatross-kyy976-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in eagle-albatross-ttk230-project (npm)

The package eagle-albatross-ttk230-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dolphin-albatross-heu788-project (npm)

The package dolphin-albatross-heu788-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in depressed-ivory-albatross (npm)

Source: amazon-inspector bc1e7864a89f16fcf083a51308091e24bac6e30d448f69727899487dcf508042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in depressed-beige-albatross (npm)

Source: amazon-inspector 7c63e4d1616c090b0fc0aa18a9061adb7b30678afc1abbaf9229236d40bbb953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in considerable-gold-albatross (npm)

Source: amazon-inspector 82371942ad3ef0ebde2ce108d883a379f4e213c7491db54b20623e3d3ab93881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cherry-albatross-ffg010-project (npm)

The package cherry-albatross-ffg010-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cascade-albatross-hxk006-project (npm)

The package cascade-albatross-hxk006-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in awful-tomato-albatross (npm)

Source: amazon-inspector 5aa300a100f6459dcb30910e187a5e6e6533204694f83b627c9b45b279ac4cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in assistant-orange-albatross (npm)

Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...