5903 matches found
GHSA-GXCX-QJQP-8VJW
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:17+00:00| seen| https://gist.github.com/alon710/6e6e6e4c81d80b002d5451729c5d86bb...
Malicious code in @coinmetro/app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8710d0b7801eb38be3efb787ab05f7dde1bf3d8e16e645c2b587fc6af19a60b1 The package @coinmetro/app was found to contain malicious code. Source: ghsa-malware 298d5aea9a95bac11ef6a844456d1e9144166fa3eb0885775e41a79b1c8319b6...
MAL-2026-1021 Malicious code in @atg-aml-shared/kyc-domain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669af5ff086209bd01c2d69a805bb4272ccedbc54a1a1c0ce79b0794dc92daea The package @atg-aml-shared/kyc-domain was found to contain malicious code. Source: ghsa-malware...
GHSA-9F3F-WV7R-QC8R vulnerabilities
Vulnerabilities for packages: ipfs-cluster, spegel, telegraf, op-geth, k3s, kubo...
Fedora 45 : yt-dlp (2026-3d6da3d46f)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3d6da3d46f advisory. Automatic update for yt-dlp-2026.02.21-1.fc45. Changelog Tue Feb 24 2026 Maxwell G - 2026.02.21-1 - Update to 2026.02.21. Fixes rhbz2441709. - Mitigates...
GHSA-WH94-P5M6-MR7J
creationtimestamp| type| source ---|---|--- 2026-02-21 12:10:40+00:00| seen| https://gist.github.com/alon710/d6f106c34a98367bc78dbb2de8555198...
GHSA-R6H2-5GQQ-V5V6
creationtimestamp| type| source ---|---|--- 2026-02-21 11:40:39+00:00| seen| https://gist.github.com/alon710/93d3245a84667a23e678383dbcbdb6e3...
GHSA-CXPW-2G23-2VGW
creationtimestamp| type| source ---|---|--- 2026-02-21 10:10:40+00:00| seen| https://gist.github.com/alon710/63b57342d7d50b3729afe629902bba13...
GHSA-29VQ-49WR-VM6X vulnerabilities
Vulnerabilities for packages: mlflow, kubeflow-pipelines-visualization-server, superset, open-webui, airflow, kubeflow-volumes-web-app, emissary...
GHSA-7M29-F4HW-G2VX vulnerabilities
Vulnerabilities for packages: nuclei...
GHSA-MXW3-3HH2-X2MH vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.3-rack, ruby3.4-rack, ruby3.3-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, kube-fluentd-operator, gitlab-cng, ruby3.4-rails...
GHSA-88QP-P4QG-RQM6
creationtimestamp| type| source ---|---|--- 2026-02-19 20:40:40+00:00| seen| https://gist.github.com/alon710/7f0b026aa3cc9fd728c23b8682ac26d2...
@deno/sandbox (>=0.0.9, <=0.6.0), @ekairos/dataset (>=1.21.56-beta.0, <=1.22.22-beta.development.0) +50 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.6.2)
devalue NPM version =5.0.0, =0.0.9, =1.21.56-beta.0, =1.22.4-beta.development.0, =1.21.56-beta.0, =1.21.67-beta.0, =1.21.88-beta.0, =0.0.0-dev-20260121145510, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =0.0.0-dev-20260115183047, =2.3.65, =1.1.27, =1.1.21, =1.2.263, =2.2.3, =4.0.1 and...
@budibase/server (>=3.32.1, <=3.38.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.6.6, <=2.1.0) +52 more potentially affected by CVE-2026-27121 via svelte (>=5.0.0, <=5.51.2)
svelte NPM version =5.0.0, =3.32.1, =0.6.6, =4.0.0-alpha.1, =4.0.0-alpha.1, =0.1.0, =0.0.1, =1.3.0, =0.1.4, =0.0.20, =0.15.0-beta.2, =1.1.0-beta.0, =5.0.0-next.80, =0.1.1-alpha.24, =0.1.3-next.2 and more Source cves: CVE-2026-27121 Source advisory: OSV:GHSA-F7GR-6P89-R883...
GHSA-83G3-92JG-28CX vulnerabilities
Vulnerabilities for packages: kubeflow-katib, node-gyp, pulumi, kubeflow-pipelines, renovate, pnpm-stage0, opensearch-dashboards, saf, vitess, prism, npm, py3-jupyterlab, code-server, lerna, tileserver-gl, sqlpad...
GHSA-FW7P-63QQ-7HPR filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
Point.MultiScalarMult failed to initialize its receiver. If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result. If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver wa...
GHSA-XVHF-X56F-2HPP
creationtimestamp| type| source ---|---|--- 2026-02-18 09:10:30+00:00| seen| https://gist.github.com/alon710/76cd3f1beb1ab2ec1fdc813eaacbfc51...
GHSA-RQ6G-PX6M-C248
creationtimestamp| type| source ---|---|--- 2026-02-18 05:10:31+00:00| seen| https://gist.github.com/alon710/5f804885677a1bd81a0133a8ac4995b2...