641 matches found
PT-2026-32264
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
Embedded Malicious Code
Overview @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a...
MAL-2026-2510 Malicious code in @velora-dex/sdk (npm)
Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...
Malicious code in @velora-dex/sdk (npm)
Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...
CVE-2026-33487 vulnerabilities
Vulnerabilities for packages: zitadel, gotrue-fips, mattermost, omni-fips, commercial-grafana, dex, rancher-agent, dex-fips, mattermost-fips, neuvector-fips, rancher, teleport, teleport-operator-fips, neuvector, gotrue, omni...
CVE-2026-33487 vulnerabilities
Vulnerabilities for packages: dex, rancher, rancher-agent, teleport, mattermost...
GHSA-479M-364C-43VC vulnerabilities
Vulnerabilities for packages: dex, rancher, rancher-agent, teleport, mattermost...
GHSA-479M-364C-43VC vulnerabilities
Vulnerabilities for packages: zitadel, gotrue-fips, mattermost, omni-fips, commercial-grafana, dex, rancher-agent, dex-fips, mattermost-fips, neuvector-fips, rancher, teleport, teleport-operator-fips, neuvector, gotrue, omni...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: pulumi-language-java, yunikorn-k8shim, kubernetes-csi-external-provisioner, external-dns, k8s-device-plugin, mesosphere-vsphere-csi, sftpgo-plugin-eventstore, datadog-agent, crossplane-provider-aws-cloudfront, gitlab-kas, kots, prometheus-alertmanager, kubescape,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, yunikorn-k8shim, kubernetes-csi-external-provisioner, external-dns, k8s-device-plugin, mesosphere-vsphere-csi, sftpgo-plugin-eventstore, datadog-agent, crossplane-provider-aws-cloudfront, gitlab-kas, kots, prometheus-alertmanager, kubescape,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...
CVE-2026-27139 vulnerabilities
Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...
EUVD-2025-208437
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...
CVE-2025-70034
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...
CVE-2025-70034
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...
CVE-2025-70034
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...
CVE-2025-70034
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: envoy-gateway, temporal-server, percona-xtradb-cluster-operator, juicefs, sops-fips, trillian, elastic-agent, ory-kratos-fips, goose-fips, sftpgo-plugin-eventstore, spire-server-fips, certificate-transparency-fips, loki, crossplane-provider-sql-fips,...