Malware in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17966 Malicious code in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d116e3e21a54c953174cfea5d38e38c41e5681b3182c2bf04410029693a584c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17956 Malicious code in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7da7a677624beee237b4a10d035455adc4b9475ce9ac87eb54ad9f9bf00b7f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18028 Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74975ac076a1d390227e09308021132195615ea9e569d6320a2d04d6ef51ffdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58cdac851d9895a1e03bc1606c6bc0edca565bf3eabb1166ab3495a948911b99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18026 Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b46450dbe9541d268f8ff08a5d94671796222a3cda2686dbd030ffbb6ead4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17969 Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eccc0208c328a4c0e6b718a982268822d174d7575713c3314230f6df93009fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eccc0208c328a4c0e6b718a982268822d174d7575713c3314230f6df93009fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

EUVD-2026-104402

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310

The docling-core library, through version 2.102.0 , is vulnerable to a local file disclosure (CWE-73) vulnerability. This issue occurs because the software allows attackers to supply plain filesystem paths in ImageRef URIs , effectively bypassing the allow_image_file_uri gate. By submitting craft...

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Overview On October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support RS, its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3, the vulnerability allows unauthenticated remote attacker...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions via the FileBasedKeyLifecycleManager in the PQC component. When it stores generated key material, a process umask that permits group or world access leaves the directory and unencrypted private-key JSON fil...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the XPathBuilder in the XPath component. In a route that evaluates externally supplied XML with documentType=InputSource or SAXSource, an unauthenticated external sender can read files accessible to...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through XML parsing in the Smooks data format SmooksDataFormat and smooks: component SmooksProcessor in camel-smooks. An attacker can read files accessible to the Camel process or make it send requests ...