[SECURITY] Fedora 45 Update: ocaml-curl-0.10.0-9.fc45

The Ocaml Curl Library Ocurl is an interface library for the programming language Ocaml to the networking library libcurl...

Malicious code in tron-rb (RubyGems)

Source: amazon-inspector a483b2d8f8273b5dca3a95d449d762cdfe9d79e8aea485cb89673c469e4cda6f The gem advertises TRON protocol helpers but ships only a 45-byte empty C stub ext/tron-rb/tron-rb.c and a hardcoded word-list library module; its sole operative code path is in ext/tron-rb/extconf.rb. On ge...

MAL-2026-17611 Malicious code in tron-rb (RubyGems)

RubyGems runs this gem's native extension script ext/tron-rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

MAL-2026-17592 Malicious code in cryoto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/cryoto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in @abgular/core (npm)

Source: amazon-inspector 4c4c8470613dc3a49e249f1a9f91bc756bb9b4323c78268b35816f07e78a0a9b Package name @abgular/core is a single-character transposition of @angular/core and copies that package's description, author, and repository metadata. The package.json declares a postinstall script that run...

MAL-2026-17564 Malicious code in tostpro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7785c0ac37ad4bb74abc644be2a5fc48bdb0d1248027e607fdf13ddaaa59d546 Package [email protected] declares scripts.preinstall='sh./rcepoc.sh'. On install, the shipped shell script runs id/hostname/pwd and appends a...

Malicious code in @anngular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d2078e85dc301d6b0299c93ff5e0e5e2c717290e88f18de85fce6554f2d027 Package name @anngular/core double-n impersonates @angular/core, copying its description 'Angular - the core framework' and author 'angular'...

Malicious code in css-logical-prop-shim (npm)

Source: amazon-inspector d0ffba65f80ee8f200199c8c90ebb6297b8590537c80ea50bb34874d91665b5f The package ships thunderboltRegistry.js which imports childprocess and invokes execSync with curl commands at multiple sites lines 30, 39, 47, 48. The declared purpose of the package is a CSS logical-proper...

Malicious code in express-enhanced (npm)

Source: amazon-inspector 15d6ce3e4c988439e6023bb900fde41c1a7eebe0c372eddc3a3c3c9d8206a9d6 [email protected] impersonates the express package: it ships the express README verbatim, declares TJ Holowaychuk as author, and points repository at expressjs/express, while publishing under a differen...

[SECURITY] Fedora 45 Update: curl-8.21.0-6.fc45

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Fedora 45 : curl (2026-663a2d0ba4)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-663a2d0ba4 advisory. - fix HTTP/2 server push UAF CVE-2026-18924 - fix Negotiate ambient user conn reuse CVE-2026-19931 - remove test1701 - HTTP/2 Upgrade in a HTTP/1.1...

Malicious code in css-logical-prop-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ffba65f80ee8f200199c8c90ebb6297b8590537c80ea50bb34874d91665b5f The package ships thunderboltRegistry.js which imports childprocess and invokes execSync with curl commands at multiple sites lines 30, 39, 47, 48. T...

MAL-2026-17482 Malicious code in css-logical-prop-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ffba65f80ee8f200199c8c90ebb6297b8590537c80ea50bb34874d91665b5f The package ships thunderboltRegistry.js which imports childprocess and invokes execSync with curl commands at multiple sites lines 30, 39, 47, 48. T...

curl:curl_fuzzer_proto_http2: Use-of-uninitialized-value in req_body_read_callback

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5077517036486656 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotohttp2 Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

curl: Rustls backend discloses out-of-bounds heap data during legal IMAP upload cancellation

Affected: Rustls-backed libcurl, curl 8.8.0 through 8.22.0 and current 8.23 development Summary A malicious IMAP server can apply TLS socket backpressure during an APPEND upload. If the application then legally removes the active easy handle from its multi handle, curl's IMAP cleanup sends a...

CVE-2026-104440

Versions of YesWiki prior to 4.6.7 are vulnerable to a blind server-side request forgery (SSRF) . The flaw exists because the isValidURL() function always returns true, allowing unauthenticated attackers to supply internal URLs via the idtypeannonce parameter of the /api/entries/bazarlist endpoin...

CVE-2026-104440: Server-Side Request Forgery (SSRF)

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce parameter of /api/entries/bazarlist. Because isValidURL always returns true, attackers can supply internal URLs fetche...

MiracleLinux 9 : curl-7.76.1-40.el9_8.7 (AXSA:2026-1953:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1953:07 advisory. curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to uncleared proxy authentication...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1767628458)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767628458 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or late...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785502239)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785502239 advisory. - A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection...