CVE-2026-5817: Inclusion of Functionality from Untrusted Control Sphere

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trustremotecode=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.frompretrained to import and execute arbitrary Python files included in any model pulled fr...

MAL-2026-4228 Malicious code in @tiledesk/tiledesk-server (npm)

@tiledesk/tiledesk-server version 2.18.12 is a compromised release of the legitimate Tiledesk customer support platform package. This version was injected with a CI pipeline backdoor as part of the megalodon campaign — a mass GitHub repository backdooring operation targeting CI/CD runner...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: superset, py3-pipenv, mlflow, confluent-docker-utils, open-webui, jwt-tool, pypy-3.10, kubeflow-volumes-web-app, py3-pip, reflex, py3-cassandra-medusa, airflow, httpie, ggshield, dask-kubernetes, kserve, pypy-3.11, kubeflow-jupyter-web-app, datadog-agent,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: superset, py3-pipenv, mlflow, confluent-docker-utils, open-webui, jwt-tool, pypy-3.10, kubeflow-volumes-web-app, py3-pip, reflex, py3-cassandra-medusa, airflow, httpie, ggshield, dask-kubernetes, kserve, pypy-3.11, kubeflow-jupyter-web-app, datadog-agent,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, kubeflow-pipelines-visualization-server, airflow-core, azureml-inference-server-http, kubeflow-volumes-web-app, openstack-kolla-toolbox-2025.1-fips, openstack-kolla-toolbox-2025.2, nemo-rl-cuda-13.0, apache-beam-python-3.13-sdk, httpi...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, kubeflow-pipelines-visualization-server, airflow-core, azureml-inference-server-http, kubeflow-volumes-web-app, openstack-kolla-toolbox-2025.1-fips, openstack-kolla-toolbox-2025.2, nemo-rl-cuda-13.0, apache-beam-python-3.13-sdk, httpi...

ai-pentest-lab

AI Pentest Lab Demo de segurança ofensiva com IA para palestr...

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: Basesystem Module 15-S...

SUSE-SU-2026:2033-1 Security update for docker

This update for docker rebuilds it against the current go security release...

Malicious code in arc-diag-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f08d97107d726a6ae90afbf8e354b84a7e13d4a236bc8766180a362cc8344c On npm install, the package's postinstall hook runs id to capture the installer's uid/gid/group identity and opens a raw TCP socket to...

MAL-2026-4481 Malicious code in arc-diag-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f08d97107d726a6ae90afbf8e354b84a7e13d4a236bc8766180a362cc8344c On npm install, the package's postinstall hook runs id to capture the installer's uid/gid/group identity and opens a raw TCP socket to...

Amazon Linux 2023 : docker (ALAS2023-2026-1659)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1659 advisory. Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=1.0.0, <=1.1.0) +16 more potentially affected by unknown CVE via flask-admin (>=1.4.0, <=1.5.3)

flask-admin PYPI version =1.4.0, =0.5.1, =1.0.0, =1.10.0, =1.10.3b1, =0.1.1, =0.6.7.post3, =4.2.6, =0.1.3a0, =0.5.4rc0, =1.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2016-0075...

GHSA-2V5F-5R6W-P67R MCP Registry: OCI validator skips ownership check on upstream rate limits

OCI ownership validation fails open on upstream rate limits, allowing attacker to claim arbitrary public OCI images under their own namespace Severity: Low re-scored post-triage; see Maintainer triage note below Affected: modelcontextprotocol/registry main branch at commit fe0cb3b current HEAD as...

Exploit for Unprotected Alternate Channel in Litellm

CVE-2026-40217 — LiteLLM Guardrail Sandbox Escape LiteLLM...

Exploit for CVE-2026-42945

CVE-2026-42945 PoC Go This tool is designed for detecting a...

Malicious code in jest-canvas-mock (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

MAL-2026-3953 Malicious code in @antv/g-plugin-svg-picker (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

MAL-2026-4121 Malicious code in @antv/xflow-extension (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

MAL-2026-4118 Malicious code in @antv/xflow (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...