kartykgithub-ph-f-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-f (1.0.0)

kartykgithub-ph-f NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-f and may be impacted: - kartykgithub-ph-f-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-X2M2-W3GV-M5WG...

kartykgithub-ph-f-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-f (1.0.0)

kartykgithub-ph-f NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-f and may be impacted: - kartykgithub-ph-f-dep 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17426...

kartykgithub-ph-e-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-e (1.0.0)

kartykgithub-ph-e NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-e and may be impacted: - kartykgithub-ph-e-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-7HQ7-X7WW-7CXR...

kartykgithub-ph-e-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-e (1.0.0)

kartykgithub-ph-e NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-e and may be impacted: - kartykgithub-ph-e-dep 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17425...

kartykgithub-ph-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-b (1.0.0)

kartykgithub-ph-b NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-b and may be impacted: - kartykgithub-ph-dep 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17424...

kartykgithub-ph-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-b (1.0.0)

kartykgithub-ph-b NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-b and may be impacted: - kartykgithub-ph-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-27M4-JJXC-69WF...

PT-2026-97881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock exists in the usb gadget f tcm module within the usbg make tpg function. The issue occurs because usbg make tpg holds dep lock while calling configfs depend item unlocked, whi...

PT-2026-94928

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI subsystem for RISC-V architectures within the riscv acpi add prt dep function. The loop handling within this function incorrectly manages error conditions by...

PT-2026-94571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfc llcp recv snl function where the SNL TLV list is processed using an offset and length pair derived from skb-len without bounding reads to the actual socket...

stack-smasher

stack-smasher A stack buffer overflow exploitation lab built...

CVE-2026-80800 nfc: llcp: bound the connect_sn TLV walk to the skb

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connectsn TLV walk to the skb Commit 27256cdb290e "nfc: llcp: bound SNL TLV parsing to the skb and add length checks" fixed the unbounded TLV walk in nfcllcprecvsnl, and commit d8bd2dedbde5 "nfc: llcp: fix OO...

rev-dep v3.0.0

Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • CLI Reference Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale,...

MAL-2026-11431 Malicious code in @0xlr/dep-confusion-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15016319bdfd6f98a13cf4dcca7adad8ad4a97678bfaa77e2cb9b7068be0a435 Self-described dependency-confusion proof-of-concept targeting the @gojek/argus internal scope name. The package's postinstall hook only runs echo...

Malicious Package

Overview @marketfront/infopopup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview fake-package-apache-with-copyleft-dep is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

dep-scan v6.3.0

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

rev-dep v2.19.1

Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • CLI Reference Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale,...

CVE-2026-48891

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

PT-2026-56177

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.0 Description A bug in the /ui/dependencies scheduling graph endpoint allows an authenticated UI user with read permissions on some Dags to enumerate identifiers of other Dags they are not authorized to rea...

@alenon/grpc-mock-server (>=3.1.21, <=3.2.3), @aliceo2/bookkeeping (>=1.8.0, <=1.12.0) +131 more potentially affected by CVE-2026-48068 via @grpc/grpc-js (>=1.13.0, <=1.13.4)

@grpc/grpc-js NPM version =1.13.0, =3.1.21, =1.8.0, =1.76.0, =1.0.0, =2.0.1, =1.0.7, =2.0.0, =1.1.37, =12.3.0, =0.3.1, =0.3.1, =0.3.8 and more Source cves: CVE-2026-48068 Source advisory: SNYK:JS-GRPCGRPCJS-17315646...