Malicious code in chromecast-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ded3cbd70f99d1eeed4d998a82b13da94a22539d5783a36ad7c2651a01ca724 The package chromecast-receiver was found to contain malicious code...

Malicious code in chai-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b0056e3a13b9c7f97a77ee8351068a9d1a900c5cabd5f42011b31cedf0fd13 The package chai-types was found to contain malicious code...

Malicious code in blob-internal-security-test-f63eabf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74309111e07d1757fef6d6a253d000339f2215e3166990d4e64964d4ec3d803 The package blob-internal-security-test-f63eabf7 was found to contain malicious code...

MAL-2026-1610 Malicious code in @emerald-react/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a73cc0869fbd6a9f90687210caf69cb8e9ee872202bc342c24c07ead3399b0 The package @emerald-react/icon was found to contain malicious code...

Malicious code in @emerald-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53b07341310aa38bec5a12c64977afb8a97b940baf599f6e8d632417b9997e The package @emerald-react/button was found to contain malicious code...

MAL-2026-1599 Malicious code in @emerald-react/badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1fd9db354fb18abad1dbf02e1dd5ceb8235067ff25c71c2b9a5fe274e08594 The package @emerald-react/badge was found to contain malicious code...

Malicious code in bsure.binsec (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Apple patches WebKit bug that could let sites access your data

Apple has released a Background Security Improvement to patch a flaw that could allow malicious websites to bypass browser protections and access data from other sites. What is it? The patched WebKit vulnerability is described as: “A cross-origin issue in the Navigation API was addressed with...

SUSE CVE-2025-68971

In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment e.g., to be associated with an issue or a release...

CLSA-2026-1773831456 openexr: Fix of CVE-2026-27622

CVE-2026-27622: fix integer overflow in CompositeDeepScanLine leading to heap buffer overflow...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2026-32565 WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through 4.2.2...

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 CVSS score: N/A, has been described as a cross-origin issue in WebKit's Navigation API that could be...

CVE-2026-22182

creationtimestamp| type| source ---|---|--- 2026-03-18 06:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhctssbx4f2m 2026-07-09 03:00:05+00:00| seen| https://t.me/brutsecurity/2511 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2511 2026-07-11 11:00:05+00:00|...

CVE-2026-33189

Further research determined the issue originates from a different product...

CVE-2026-33058 Kanboard has Authenticated SQL Injection in Project Permissions Handler

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51...

CVE-2026-28499 LeafKit's HTML escaping may be skipped for Collection values, enabling XSS

LeafKit is a templating language with Swift-inspired syntax. Prior to version 1.14.2, HTML escaping doesn't work correctly when a template prints a collection Array / Dictionary via value. This can result in XSS, allowing potentially untrusted input to be rendered unescaped. Version 1.14.2 fixes...

[SECURITY] Fedora 44 Update: forgejo-14.0.3-1.fc44

Forgejo pronounced /for=CB=88d=CD=A1=CA=92e.jo/ is a lightweight software f orge. Use it to host git repositories, track their issues and allow people to contribute to them!...

EulerOS Virtualization 2.13.1 : grub2 (EulerOS-SA-2026-1636)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandl...

Linux Distros Unpatched Vulnerability : CVE-2026-1182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...