31460 matches found
GHSA-6JV9-X5W9-2CCM vulnerabilities
Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, tez, thingsboard...
MAL-2026-5723 Malicious code in @ci-lifecycle-test/postinstall-ping (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c160ad40a237c1e682c696ebd0aec2861ca072f47bd5b725bc80f7f95ed509 The package's postinstall lifecycle script postinstall.js executes automatically on npm install and POSTs the JSON-serialized contents of the entire...
Fedora 44 : composer (2026-9b34a78e81)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b34a78e81 advisory. Version 2.10.1 - 2026-06-04 Security: Fixed shell escaping when opening an editor 12903 Security: Verify backup phar signature before restoring it when using...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack inadequate validation of symlink targets in the file access process. An attacker can access or modify files outside of the intended user scope by creating or leveraging symbolic links that point to locations beyond the...
CVE-2026-46672
creationtimestamp| type| source ---|---|--- 2026-06-12 20:16:24+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-7gh7-258j-4mpq...
OPENSUSE-SU-2026:20963-1 Security update for neonmodem
This update for neonmodem fixes the following issues: Changes in neonmodem: - Update golang.org/x/net dependency to v0.55.0 due to bsc1267193 - Update golang.org/x/image dependency to v0.38.0 due to bsc1260727 - Update golang.org/x/term dependency to v0.42.0 due to bsc1260727 - Update to version...
CVE-2026-55448
creationtimestamp| type| source ---|---|--- 2026-06-12 17:40:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph 2026-06-26 18:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lljtyfl2l...
CVE-2026-33646
creationtimestamp| type| source ---|---|--- 2026-06-12 15:56:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-fjj5-v948-whjj 2026-06-26 19:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7na4xe2m2c...
MAL-2026-5697 Malicious code in web-model-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...
Malicious code in web-model-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...
GHSA-R8F8-4PGH-4M8V vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-50230
creationtimestamp| type| source ---|---|--- 2026-06-12 02:49:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-50230.yaml...
GHSA-68C4-77CF-437J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-855R-9WVC-25GH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7X6F-897Q-8H7J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JMPJ-8P4W-J5RQ vulnerabilities
Vulnerabilities for packages: chromium...
OPENSUSE-SU-2026:11011-1 golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-33760
creationtimestamp| type| source ---|---|--- 2026-06-11 19:53:35+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9c59-2mvc-vfr8 2026-07-01 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpld4xhnma2e...