CVE-2026-54339

Glean , a self-hosted RSS reader and personal knowledge management tool, is affected by a non-blind SSRF with full response disclosure in versions prior to 0.2.6 . An attacker who can POST a malicious feed URL to /api/feeds/discover causes the background worker to fetch each item link without net...

EUVD-2026-82429

Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feedurl to discoverfeedfeedurl, creates a subscription through FeedService.createsubscription, and enqueues fetchfeedtask. The background path calls...

Malicious Package

Overview backstage-plugin-glean is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in backstage-plugin-glean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824531546cd7527be37fc4aa5ca2020424a1ecf090eaba3a8974105871c0931f The package backstage-plugin-glean was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-205460

Malicious code in backstage-plugin-glean npm...

MAL-2025-192944 Malicious code in backstage-plugin-glean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824531546cd7527be37fc4aa5ca2020424a1ecf090eaba3a8974105871c0931f The package backstage-plugin-glean was found to contain malicious code. Source: ghsa-malware...

MAL-2025-5813 Malicious code in glean-mcp-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2116bc0a7e97b50629b8572a3e7b46cb436c7732be15b4aa9c87835444eff955 Any computer that has this package installed or running should be considered...

Malicious code in glean-mcp-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2116bc0a7e97b50629b8572a3e7b46cb436c7732be15b4aa9c87835444eff955 Any computer that has this package installed or running should be considered...

Malicious code in glean-indexing-api-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4f72985a496d7f564761c6862c160db30daaa442596d1cb609b0cc750bfad7a Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-4220 Malicious code in glean-indexing-api-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4f72985a496d7f564761c6862c160db30daaa442596d1cb609b0cc750bfad7a Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...