CLEANSTART-2026-MN49716 In Eclipse Jetty, versions 12

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...

CLEANSTART-2026-AU34344 In jose4j before 0

Security vulnerability affects the apache-nifi package. In jose4j before 0...

CLEANSTART-2026-DA06561 In Eclipse Jetty, versions <=9

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions =9...

CLEANSTART-2026-IY45098 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.6.11-r0

Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XX38333 Prometheus is an open-source monitoring system and time series database

CVE-2026-42154 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database

CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-FB95411 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the cortex package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-TZ27062 Prometheus is an open-source monitoring system and time series database

CVE-2026-44903 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

OPENSUSE-SU-2026:12099-1 cyrus-sasl-2.1.28-13.1 on GA media

These are all security issues fixed in the cyrus-sasl-2.1.28-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12102-1 iscsiuio-0.7.8.8-114.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-114.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12105-1 xwayland-24.1.13-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1791584881 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.2...

AZL-107973 CVE-2026-108267 affecting package gcc 13.2.0-7

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

AZL-107985 CVE-2026-108267 affecting package golang 1.27.1-1

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting è una libreria Python per generare un elenco di potenziali domini typosquatting con un motore di permutazione dei nomi di dominio, per alimentare AIL e altri sistemi. Lo strumento può essere utilizzato come strumento autonomo o per alimentare altri sistemi. S...

CVE-2026-108267 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

Malicious Package

Overview media-manager5 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @galicia-toolkit-nestjs/paas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @library-wide/library-shell is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...