Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

MAL-2026-294 Malicious code in lusha-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1c6b65695a715c9538b69f7230b4c9f89fef68de10ad9b6e2b625f2b22f62 The package lusha-ui-components was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3087

Malicious code in assurance-common-components npm...

MAL-2026-268 Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

Freeter security vulnerabilities

Freeter is an open-source work assistant software developed by Freeter. Version 1.2.1 of Freeter contains a security vulnerability. This vulnerability stems from custom component titles and files that contain stored cross-site scripting, which may lead to remote code execution...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: MEND:CVE-2026-22803...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: GHSA-J2F3-WQ62-6Q46...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: SNYK:JS-SVELTEJSKIT-14996726...

@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), positron-components (>=1.12.2, <=1.12.3) potentially affected by CVE-2026-22803 via @sveltejs/kit (>=2.49.0, <=2.49.3)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =1.12.2, =1.12.3 Source cves: CVE-2026-22803 Source advisory: OSV:GHSA-J2F3-WQ62-6Q46...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

Inbox COM objects Code Execution

The vulnerability of Inbox COM objects in Windows operating systems relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

MiracleLinux 3 : xen-3.0.3-120.2.0.1.AXS3 (AXSA:2011-180:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-180:02 advisory. This package contains the Xen tools and management daemons needed to run virtual machines on x86, x8664, and ia64 systems. Information on how to use Xen can b...

CVE-2026-20972

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

CVE-2026-21219

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Vasion Print Virtual Appliance Code Execution

The vulnerabilities of the Vasion Print Virtual Appliance Host and Print Application software management, control, and process automation systems are related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a remote attacker to execute arbitra...

Hewlett Packard Enterprise AOS security vulnerabilities

Hewlett Packard Enterprise AOS HPE AOS is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise AOS that stems from multiple out-of-bounds read vulnerabilities in the handling of data...