CLSA-2026-1792529431 TuxCare security update for @babel/helper-module-imports (1 CVE)

TuxCare rebuilt @babel/helper-module-imports to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792529429 TuxCare security update for @babel/helper-module-imports (1 CVE)

TuxCare rebuilt @babel/helper-module-imports to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792529432 TuxCare security update for @babel/helper-module-imports (2 CVEs)

TuxCare rebuilt @babel/helper-module-imports to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792529424 TuxCare security update for @babel/helper-module-imports (1 CVE)

TuxCare rebuilt @babel/helper-module-imports to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792373926 TuxCare security update for @babel/helper-module-transforms (2 CVEs)

TuxCare rebuilt @babel/helper-module-transforms to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792373925 TuxCare security update for @babel/helper-module-transforms (1 CVE)

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792373923 TuxCare security update for @babel/helper-module-transforms (1 CVE)

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792373914 TuxCare security update for @babel/helper-module-transforms (1 CVE)

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

Jinja2 Code Execution

The vulnerability of the jinja2.Template function in the api/core/helper/codeexecutor/jinja2/jinja2transformer.py file, a Jinja2 template processor for Dify application development, is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiti...

CVE-2026-0528 Improper Input Validation in Metricbeat Leading to Denial of Service

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

PT-2026-6491

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

CVE-2026-0528: Improper Validation of Array Index

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

Malicious Package

Overview setup-helper-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47204 Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in setup-helper-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-3606 Malicious code in helper-module-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778627c6fddd3213ecd51919302043e954a27431ff63b240135308cd3d9a6512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-module-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778627c6fddd3213ecd51919302043e954a27431ff63b240135308cd3d9a6512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2007-0461: Undefined Security Weakness

Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service memory consumption via unknown vectors...