CLSA-2026-1785952964 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3...

CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...

CLSA-2026-1781571271 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 10 CVEs. Fixed in 6.1.21-tuxcare.7...

CLSA-2026-1777250296 TuxCare security update for 35 packages (3 CVEs)

TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...

CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)

TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)

TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...

Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...

MAL-2026-11112 Malicious code in @wagni_bot/metamask (npm)

The npm package @wagnibot/metamask is a supply-chain credential stealer disguised as a MetaMask SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...

MAL-2026-11110 Malicious code in @wagni_bot/eth (npm)

The npm package @wagnibot/eth is a supply-chain credential stealer disguised as a Ethereum SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...

Malicious code in @wagni_bot/polygon (npm)

The npm package @wagnibot/polygon is a supply-chain credential stealer disguised as a Polygon SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...

MAL-2026-11113 Malicious code in @wagni_bot/opensea (npm)

The npm package @wagnibot/opensea is a supply-chain credential stealer disguised as a OpenSea SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...

MAL-2026-6774 Malicious code in @marketfront/devtoolsloader (npm)

The @marketfront/devtoolsloader package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

GHSA-CMPJ-5W72-JQ28 vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-26-openj9...

CVE-2008-3109 vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-26-openj9...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: qt5: qt5-filesystem-5.15.18-2.1.hum1 aarch64, x8664 qt5-rpm-macros-5.15.18-2.1.hum1 noarch qt5-srpm-macros-5.15.18-2.1.hum1 noarch qt5-5.15.18-2.1.hum1.src src...

hello_sf_pkg (=1.0.0), sf-b9.2-test-npm (>=1.2.0 <=1.3.0) +3 more potentially affected by unknown CVE via jquerry (=0.0.1-security)

jquerry NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquerry and may be impacted: - hellosfpkg =1.0.0 - sf-b9.2-test-npm =1.2.0, =1.3.0 - sfgittestpackage =1.0.0 - sfgittestpackage2 =1.0.0 - web3bruh =0.0.0 Source cves:...

UBUNTU-CVE-2021-21391

CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular...

CVE-2021-21391

CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular...