31431 matches found
PT-2026-57920
Name of the Vulnerable Software and Affected Versions HedgeDoc versions prior to 1.11.0 Description The GitHub Gist export flow fails to properly validate the OAuth2 state value, checking only for its presence instead of verifying it against the user session. This allows an attacker to forge a...
MAL-2026-10215 Malicious code in fast-dotenv (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3250a4b69ccce49128d2e75ffb9e577746de4fb3afe0e0d242fbe5d094d02d The package presents itself as a.env loader but on load/config spawns a background thread that, after a 72–96 hour activation delay jittered by...
Malicious code in auto-debug-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd31c11b5149d8dd2142c81cc066576dc799ba4dae4599a9569cb56256417ec package.json declares a postinstall hook node install.js that fires automatically on npm install. On Windows, install.js invokes hidden PowerShell -N...
MAL-2026-10209 Malicious code in auto-debug-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd31c11b5149d8dd2142c81cc066576dc799ba4dae4599a9569cb56256417ec package.json declares a postinstall hook node install.js that fires automatically on npm install. On Windows, install.js invokes hidden PowerShell -N...
GHSA-FJ8F-M44G-C479
creationtimestamp| type| source ---|---|--- 2026-07-11 17:11:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j...
GHSA-GCM7-57GF-953C
creationtimestamp| type| source ---|---|--- 2026-07-11 04:41:43+00:00| seen| https://gist.github.com/alon710/5b22d6c437eabc82b89ba6fa8ccee27d...
CVE-2026-54063
creationtimestamp| type| source ---|---|--- 2026-07-10 20:35:19+00:00| published-proof-of-concept| https://github.com/qax-os/excelize/security/advisories/GHSA-h69g-9hx6-f3v4 2026-07-10 23:37:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcwqstcx2s 2026-07-11 00:55:06+00:0...
CVE-2026-54088
creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxokhktk2v 2026-07-10 20:35:07+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm 2026-07-11...
GHSA-W7CG-WHH7-XP28
creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66...
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised version, @injectivelabs/[email protected] , came embedded wi...
GHSA-VQ3G-6QWH-5WJ2 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-qemu-melange, linux-gcp...
GHSA-CX83-HXFR-M85V vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-qemu-melange, linux-gcp...
GHSA-73HH-X7P5-J6FF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H4V8-PH46-3VQP vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FX2C-JQXX-QWCV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7M6Q-GGF5-RWG4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PG56-9PGF-WM9X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F75R-XCG5-HGF3 vulnerabilities
Vulnerabilities for packages: chromium...