44456 matches found
homeassistant-stubs (2022.2.0b5), pytest-homeassistant-custom-component (0.6.4) potentially affected by CVE-2026-91129 via homeassistant (2022.2.0b5)
homeassistant PYPI version 2022.2.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b5 - pytest-homeassistant-custom-component 0.6.4 Source cves: CVE-2026-91129 Source advisory:...
homeassistant-stubs (2021.12.9), pytest-homeassistant-custom-component (0.5.13) potentially affected by CVE-2026-91129 via homeassistant (2021.12.9)
homeassistant PYPI version 2021.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.9 - pytest-homeassistant-custom-component 0.5.13 Source cves: CVE-2026-91129 Source advisory:...
homeassistant-stubs (2022.3.0b1) potentially affected by CVE-2026-91129 via homeassistant (2022.3.0b1)
homeassistant PYPI version 2022.3.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b1 Source cves: CVE-2026-91129 Source advisory: OSV:GHSA-4GHV-53CQ-7WP3...
nucypher (>=0.1.0a17, <=0.1.0a20) potentially affected by CVE-2026-77528 via autobahn (19.2.1)
autobahn PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - nucypher =0.1.0a17, =0.1.0a20 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...
brokerkit-zerodha (1.0.3), buckets-for-zerodha (0.1.0) +30 more potentially affected by CVE-2026-77528 via autobahn (19.11.2)
autobahn PYPI version 19.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - brokerkit-zerodha 1.0.3 - buckets-for-zerodha 0.1.0 - easy-kite-methods =0.0.1, =0.0.1, =1.0.0, =1.0.2, =0.19.0, =0.0.1, =0.0.1, =0.1.0, =0.1....
ezbeq (>=2.5.0, <=2.8.0), fiduswriter (>=4.1.1, <=5.0.0a2) +6 more potentially affected by CVE-2026-77528 via autobahn (25.12.2)
autobahn PYPI version 25.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - ezbeq =2.5.0, =4.1.1, =3.11.3, =1.3.9, =0.28.0, =2.0.0, =2.2.0 - senbai 0.0.1 Source cves: CVE-2026-77528 Source advisory:...
@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @agent-score/pay (>=0.1.0-rc.4, <=0.2.6) +167 more potentially affected by CVE-2026-63627 via mppx (>=0.1.1, <=0.7.0)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.0-rc.4, =0.0.1, =0.0.0-pr-246-20260515203519, =0.1.0, =0.1.0, =0.1.2, =0.1.1, =0.1.1, =0.1.0, =1.0.11, =1.0.0, =1.0.0, =2.4.0 and more Source cves: CVE-2026-63627 Source advisory: OSV:GHSA-727H-3VM5-QWQ6...
MAL-2026-16390 Malicious code in oracle-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...
Malicious code in oracle-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...
ac.pao:reports-java-engine (1.0.0), ae.alphapay:alphapay-gateway-client (2.0.0) +38158 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.17.1, <=2.18.10)
com.fasterxml.jackson.core:jackson-core MAVEN version =2.17.1, =1.0.0, =1.0.0, =0.1.1, =0.1.0-rc4, =0.1.0-rc4, =0.1.3, =0.21.0-alpha.1, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.86.0, =0.120.0 and more Source cves: CVE-2026-89407 Source advisory: SNYK:JAVA-COMFASTERXMLJACKSONCORE-20059677...
MAL-2026-16386 Malicious code in @mikudeveloper/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03bf7166a5353a0b22409ebbb724ee53f24394c9ff340df668c970772796e28 This package is a fork of Baileys that declares libsignal in package.json as github:tenka-san/libsignal-node — a git dependency with no commit SHA,...
ai.pipestream.proto-toolchain:ai.pipestream.proto-toolchain.gradle.plugin (>=0.7.24, <=0.7.26), ai.pipestream:quarkus-buf-grpc-generator (>=0.7.24, <=0.7.26) +2254 more potentially affected by CVE-2026-89407 via tools.jackson.core:jackson-core (>=3.2.0, <=3.2.1)
tools.jackson.core:jackson-core MAVEN version =3.2.0, =0.7.24, =0.7.24, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha4, =2.0.0-alpha6 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics-deploym...
ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12746 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)
com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89407 Source advisory: MEND:CVE-2026-89407...
ac.pao:reports-web (1.0.0), ai.aarvion:aarvion-spring-boot-starter (>=0.1.0, <=0.2.0) +37028 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.19.0-rc2, <=2.21.6)
com.fasterxml.jackson.core:jackson-core MAVEN version =2.19.0-rc2, =0.1.0, =1.0.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.6 and more Source cves:...
asr-consilium (>=1.0.1, <=1.0.6), coro-asr (>=1.0.3, <=1.4.0) +25 more potentially affected by CVE-2026-24239 via nemo-toolkit (>=2.0.0rc0, <=2.7.3)
nemo-toolkit PYPI version =2.0.0rc0, =1.0.1, =1.0.3, =1.0.0, =0.1.2, =0.5.0, =5.1.6, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24239 Source advisory: MEND:CVE-2026-24239...
MAL-2026-16379 Malicious code in @user-services/web-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02523ee1cb3bbb9119054ec3ed14ffc62d0d33ae3bd44dc29312c772cdba106b @user-services/[email protected] fires a hidden telemetry probe on both the npm install lifecycle node index.js and on every require of the modul...
Malicious code in cisco-github-simple (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2281890525d50138fab3030e71561f01f898fe9b97d56d2a894f1abf30632205 The package declares a preinstall lifecycle hook node index.js that runs automatically on npm install. index.js collects host reconnaissance from the...
MAL-2026-16381 Malicious code in cisco-github-simple (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2281890525d50138fab3030e71561f01f898fe9b97d56d2a894f1abf30632205 The package declares a preinstall lifecycle hook node index.js that runs automatically on npm install. index.js collects host reconnaissance from the...
ROOT-APP-MAVEN-CVE-2026-40983 CVE-2026-40983 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40983 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...