CVE-2025-62043

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in WPSight WPCasa allows DOM-Based XSS.This issue affects WPCasa: from n/a through 1.4.1...

MAL-2026-1583 Malicious code in whatnot-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7124b844cb92c573d57e94d1060a58445a82d03984c430e1632807fda9d227 The package whatnot-web was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in whatnot-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7124b844cb92c573d57e94d1060a58445a82d03984c430e1632807fda9d227 The package whatnot-web was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1581 Malicious code in whatnot-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660bfcc33bb74e7ed20b985e9e50f5ade9988def6cf29a9a31a9107ea619ed64 The package whatnot-events was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in whatnot-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660bfcc33bb74e7ed20b985e9e50f5ade9988def6cf29a9a31a9107ea619ed64 The package whatnot-events was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in whatnot-manifests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0504ddd24de9ec3870bb8fc657436f5a61e3f6327f0e044bc380bfe3479d40 The package whatnot-manifests was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1582 Malicious code in whatnot-manifests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0504ddd24de9ec3870bb8fc657436f5a61e3f6327f0e044bc380bfe3479d40 The package whatnot-manifests was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in browser-gaming-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6192938bfd5be1cecf133866c6e290b57293bede88ca5b11d8af9aab40bae003 The package browser-gaming-client was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1578 Malicious code in browser-gaming-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6192938bfd5be1cecf133866c6e290b57293bede88ca5b11d8af9aab40bae003 The package browser-gaming-client was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1579 Malicious code in nf-cl-ls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a649ee3bcabdbceb5c56f4056dda77174867deaa1600f8a196792cc6c1356c The package nf-cl-ls was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in nf-cl-ls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a649ee3bcabdbceb5c56f4056dda77174867deaa1600f8a196792cc6c1356c The package nf-cl-ls was found to contain malicious code. Source: ossf-package-analysis...

PT-2026-26425

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. The allowed spam host domains check utilized Stringend with?...

Apache Airflow Information Disclosure Vulnerability (CNVD-2026-15156)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform with the creation, management and monitoring of workflow functions. The platform is scalable and dynamic monitoring and other features. Apache Airflow has an information disclosure vulnerability that stems...

qui 安全漏洞

qui is a lightweight multi-instance web management interface developed by autobrr. Versions of qui prior to 1.14.1 have security vulnerabilities, which stem from overly permissive CORS policies. These vulnerabilities could lead to cross-domain request forgery and information leakage...

Discourse 访问控制错误漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email, and chat rooms. Versions of Discourse prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contained a access control vulnerability. This vulnerability stemm...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2026-1632)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2026-1642)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Origin Validation Error

Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to Origin Validation Error in the REST/WebUI FastAPI application due to the lack of host header validation and the absence of an allowlist for trusted hosts. An attacker can gain...

Permissive Cross-domain Policy with Untrusted Domains

Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the default CORS configuration in the REST API web server, which sets alloworigins to and allowcredentials to True. An...

PYSEC-2026-2171

Glances is an open-source system cross-platform monitoring tool. Glances recently added DNS rebinding protection for the MCP endpoint, but prior to version 4.5.2, the main REST/WebUI FastAPI application still accepts arbitrary Host headers and does not apply TrustedHostMiddleware or an equivalent...