Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malware in twapfetch

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84335

An incorrect authorization flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522302504 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-84328

A missing authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498710886 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-79755: Improper Neutralization of Special Elements used in an OS Command

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace= " command that is executed via the host...

Linux Distros Unpatched Vulnerability : CVE-2026-84335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged...

PT-2026-84823

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

SmartZone ZoneDirector SmartCell Gateway Cryptographic Signature Verification

The vulnerabilities of the SmartZone, ZoneDirector, and SmartCell Gateway wireless network controller software are related to errors in checking the cryptographic signature. Exploiting these vulnerabilities can allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Network Component Google Chrome Microsoft Edge Access Data Tamper Data

The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML...

Google Chrome Microsoft Edge Extension Access Data Tampering

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to improper restriction of the visual layers of the user interface. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrit...

Speech Component Access Tampering

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML pa...

Network Component Google Chrome Microsoft Edge Access Data Tamper Data

The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially...

Google Chrome Edge XML Data Tampering

The XML component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML pa...

Google Chrome Microsoft Edge Extension Access Data Tampering

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially...