MAL-2026-12919 Malicious code in bnpl-blocks-desktop-bnpl-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ebc784cdc9c083f42cf6323e773eb7bf43b1b927c936c609bb8d93a90bb4cb On any require/import of this package, index.js loads ext.js which downloads a platform-specific binary over HTTPS from string-split-obfuscated...

RHSA-2026:49944 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2023:0777 Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update

Bulletin has no description...

Malicious code in simple-date-formatter-util-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f8a19e2cff3bcaf070316f16650d8c1af6714f4c44db56971299ef01c16a25 Package advertises itself as a trivial date-formatting utility index.js exports a one-line formatDate wrapper but ships a package.json postinstall ho...

Malicious code in simple-date-formatter-new-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaef04a98dce874de04a92b580f4f919067a0e492d38dff69a57fc09db1cfe14 The package's postinstall script in package.json runs a shell pipeline that collects host and container-runtime information kernel version via uname...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.18.51 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-70440: Improper Neutralization of Input During Web Page Generation

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2026-68275

Name of the Vulnerable Software and Affected Versions Jenkins Qualys Container Scanning Connector Plugin versions prior to 1.8.0.6 Description Stored cross-site scripting XSS occurs because user-controlled field values are not properly escaped within a JavaScript context. This issue can be...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Malicious code in @nebula.js/sn-layout-container (npm)

npm/@nebula.js/sn-layout-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @nebula.js/sn-tabbed-container (npm)

npm/@nebula.js/sn-tabbed-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11582 Malicious code in @nebula.js/sn-tabbed-container (npm)

npm/@nebula.js/sn-tabbed-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

EUVD-2026-52745

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAgent/CSVAgent.ts extracted attacker-controlled CSV data with file.split','.pop and interpolated it directly into executable Python as...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.21.27 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.32 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.22.8 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...