gridplayer (0.5.4), twitch-play (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-92164 via streamlink (>=8.0.0, <=8.4.0)

streamlink PYPI version =8.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-92164 Source advisory: GHSA-VF2X-4V53-PM7V...

tg-autoposter (2.4.4) potentially affected by CVE-2026-92164 via streamlink (4.0.1)

streamlink PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.4 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

tg-autoposter (2.4.2) potentially affected by CVE-2026-92164 via streamlink (3.2.0)

streamlink PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

MAL-2026-17159 Malicious code in simple-date-formatter-new-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f295d4208d67cbb14c8804b287109ad5ed7946e39f0256e601f846e485c6c54 [email protected] presents itself as a date-formatting utility but ships a trivial three-line stub while its package.json postinstal...

Malicious code in simple-date-formatter-new-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f295d4208d67cbb14c8804b287109ad5ed7946e39f0256e601f846e485c6c54 [email protected] presents itself as a date-formatting utility but ships a trivial three-line stub while its package.json postinstal...

MAL-2026-17156 Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

MAL-2026-17153 Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

@5ss/ai-tools (>=2.11.1, <=2.11.3), @aem-screens/franklin-variation-creator (1.0.0-B001) +252 more potentially affected by CVE-2026-97151 via mammoth (>=1.3.6, <=1.12.1)

mammoth NPM version =1.3.6, =2.11.1, =0.9.1, =3.4.1, =0.0.1, =1.0.0, =0.5.5, =0.0.9, =0.1.5, =1.1.0, =1.2.1, =0.1.13, =0.1.14 - @catmasks/free-editor 1.0.1 and more Source cves: CVE-2026-97151 Source advisory: MEND:CVE-2026-97151...

Linux Distros Unpatched Vulnerability : CVE-2026-93268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handl...

CVE-2026-93269: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

Linux Distros Unpatched Vulnerability : CVE-2026-93252

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and...

Linux Distros Unpatched Vulnerability : CVE-2026-93269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem...

CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

@228-fund/elysia-effect (0.0.1), @228-fund/elysia-msgpack (>=0.0.1, <=0.0.3) +74 more potentially affected by CVE-2026-56669 via elysia (>=1.0.9, <=1.4.28)

elysia NPM version =1.0.9, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.0-next.4, =1.0.0-next.4, =1.0.0, =0.0.1, =1.0.0, =1.0.2 and more Source cves: CVE-2026-56669 Source advisory: GHSA-9643-4QGH-G8MX...

com.github.fsanaulla:chronicler-ahc-io_2.12 (>=0.6.5, <=0.7.0), com.github.fsanaulla:chronicler-ahc-management_2.12 (>=0.6.5, <=0.7.0) +37 more potentially affected by CVE-2026-61814 via org.typelevel:jawn-parser_2.12 (0.14.3)

org.typelevel:jawn-parser2.12 MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.12 and may be impacted: - com.github.fsanaulla:chronicler-ahc-io2.12 =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5,...

ai.mantik:bridge-protocol_2.13 (>=0.4.0-rc1, <=0.4.0), ai.mantik:componently_2.13 (>=0.4.0-rc1, <=0.4.0) +1719 more potentially affected by CVE-2026-59990 via org.typelevel:jawn-parser_2.13 (>=1.0.0-rc1, <=1.6.0)

org.typelevel:jawn-parser2.13 MAVEN version =1.0.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0-rc1, =0.4.0 and more Source cves: CVE-2026-59990 Source advisory:...