Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

MAL-2026-2510 Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, gotrue, dex, neuvector-fips, rancher-agent, commercial-grafana, gotrue-fips, mattermost-fips, rancher, zitadel, teleport, omni-fips, dex-fips, neuvector, mattermost, omni...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher, teleport, mattermost, dex...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher, teleport, mattermost, dex...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, gotrue, dex, neuvector-fips, rancher-agent, commercial-grafana, gotrue-fips, mattermost-fips, rancher, zitadel, teleport, omni-fips, dex-fips, neuvector, mattermost, omni...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

EUVD-2025-208437

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, chezmoi, elastic-agent-fips, step-kms-plugin-fips, loki, flux-kustomize-controller, spire-server, cg, keda-fips, step-ca, ory-kratos, fulcio, percona-xtradb-cluster-operator, temporal, rke2-runtime, spire-server-fips, ratify, terragrunt, apko-fips...

TeamViewer DEX Client Buffer Overflow Vulnerability

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. TeamViewer DEX Client prior to version 26.1 suffers from a buffer overflow vulnerability that stems from the Content Distribution Service's UDP command processor failing to correctly...

TeamViewer DEX Client Command Injection Vulnerability

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. TeamViewer DEX Client suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...