CVE-2026-121293

On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol BGP peer can send a crafted BGP message over an established session with the Dynamic Path Selection DPS address family negotiated. This can cause the BGP process to terminate unexpectedly, resetting all BGP sessio...

CVE-2026-120979

This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State BGP-LS configured for Dynamic Path Selection DPS. On affected platforms running Arista EOS with BGP-LS configured for DPS, an attacker who has established an authenticated...

CVE-2026-120978

On affected Arista EOS platforms running Border Gateway Protocol with Link State BGP-LS and configured with the Dynamic Path Selection DPS consumer role, an attacker who has established an authenticated BGP-LS session with the device can send a crafted message to cause the BGP agent to restart...

MAL-2026-13574 Malicious code in dolyame-ui-inputautocomplete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7399edc4ed4854b8b8e61ebbebf6f31b658aaf0b4d798f789dde446c88004abb On require/import, bootstrap.js selects a platform-specific path /pkg/package, /pkg/package.exe, /pkg/loadermac, /pkg/package-arm64 and downloads an...