CVE-2026-53219 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53210 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53208 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53183 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53190 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53217 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53229 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53215 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53194 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

CVE-2026-53176 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...

Malicious code in date-fns-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

CVE-2026-34457

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authentication bypass in deployments where OAuth2 Proxy is used with an authrequest-style integration such as nginx authrequest and either...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

Malicious code in @redhat-cloud-services/compliance-client (npm)

Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...