PT-2026-130695

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-130704

TuxCare rebuilt @babel/helper-module-transforms to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...

PT-2026-130692

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-130693

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-130699

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-130698

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-130703

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

PT-2026-130705

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-130701

TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-130702

TuxCare rebuilt @babel/helper-module-transforms to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

PT-2026-130696

TuxCare rebuilt @babel/helper-module-transforms to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...

PT-2026-130700

TuxCare rebuilt @babel/helper-module-transforms to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

Jinja2 Code Execution

The vulnerability of the jinja2.Template function in the api/core/helper/codeexecutor/jinja2/jinja2transformer.py file, a Jinja2 template processor for Dify application development, is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiti...

CVE-2026-0528

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

CVE-2026-0528 Improper Input Validation in Metricbeat Leading to Denial of Service

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

PT-2026-6491

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

CVE-2026-0528: Improper Validation of Array Index

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

Malware in setup-helper-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47204 Malicious code in setup-helper-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02c25d78f51cf02062df08594fff995746429e6c4ba2e74b5a6fbddfcfb3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...