MAL-2026-2510 Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: gotrue-fips, teleport, neuvector, dex-fips, omni, mattermost-fips, rancher, teleport-operator-fips, dex, zitadel, omni-fips, rancher-agent, gotrue, commercial-grafana, neuvector-fips, mattermost...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: dex, rancher-agent, teleport, mattermost, rancher...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: dex, rancher-agent, teleport, mattermost, rancher...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: gotrue-fips, teleport, neuvector, dex-fips, omni, mattermost-fips, rancher, teleport-operator-fips, dex, zitadel, omni-fips, rancher-agent, gotrue, commercial-grafana, neuvector-fips, mattermost...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, kubernetes-dashboard-web, docker-cli, rancher-helm, cerbos, snyk-cli, restic, kube-arangodb, fuse-overlayfs-snapshotter, rancher-agent, terraform-provider-kubernetes, blob-csi, cluster-api-gcp-controller, gitness, oauth2-proxy, temporal-server...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, kubernetes-dashboard-web, docker-cli, rancher-helm, cerbos, snyk-cli, restic, kube-arangodb, fuse-overlayfs-snapshotter, rancher-agent, terraform-provider-kubernetes, blob-csi, cluster-api-gcp-controller, gitness, oauth2-proxy, temporal-server...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

EUVD-2025-208437

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: kots, jitsucom-bulker, juicefs, cerbos, grafana-alloy, kyverno, apko, beats-fips, cg, sqlexporter, flux-kustomize-controller, envoy-gateway, elastic-agent-fips, reports-server, chezmoi, sqlexporter-fips, keda-fips, aactl, dbmate, spire-server-fips, grafana-alloy-fips...

TeamViewer DEX Client Denial of Service Vulnerability (CNVD-2026-16664)

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A denial of service vulnerability exists in TeamViewer DEX Client, which can be exploited by an attacker to cause a stack memory leak and denial of service...

TeamViewer DEX Client Command Injection Vulnerability

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. TeamViewer DEX Client suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...