CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database

CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-FB95411 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the cortex package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-TZ27062 Prometheus is an open-source monitoring system and time series database

CVE-2026-44903 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-XX38333 Prometheus is an open-source monitoring system and time series database

CVE-2026-42154 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

OPENSUSE-SU-2026:12105-1 xwayland-24.1.13-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12102-1 iscsiuio-0.7.8.8-114.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-114.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12099-1 cyrus-sasl-2.1.28-13.1 on GA media

These are all security issues fixed in the cyrus-sasl-2.1.28-13.1 package on the GA media of openSUSE Tumbleweed...

ca.derekellis.kgtfs:gtfs-db (0.5.2), ca.derekellis.kgtfs:raptor (0.5.2) +447 more potentially affected by CVE-2026-108474 via org.jetbrains.exposed:exposed-core (>=1.1.0, <=1.5.0)

org.jetbrains.exposed:exposed-core MAVEN version =1.1.0, =1.0.0, =1.1.6, =2.3.3, =2.3.6, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =0.1.0, =0.2.0 and more Source cves: CVE-2026-108474 Source advisory: MEND:CVE-2026-108474...

CLSA-2026-1791584881 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.2...

AZL-107973 CVE-2026-108267 affecting package gcc 13.2.0-7

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

AZL-107985 CVE-2026-108267 affecting package golang 1.27.1-1

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting è una libreria Python per generare un elenco di potenziali domini typosquatting con un motore di permutazione dei nomi di dominio, per alimentare AIL e altri sistemi. Lo strumento può essere utilizzato come strumento autonomo o per alimentare altri sistemi. S...

CVE-2026-108267 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.1.0, <=0.1.2) +6 more potentially affected by CVE-2026-108261 via @tinacms/app (>=0.0.0-a0a8cb3-20260817041004, <=2.5.12)

@tinacms/app NPM version =0.0.0-a0a8cb3-20260817041004, =0.10.0, =0.1.0, =0.1.0, =0.0.0-20220819182845, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus 1.2.1 Source cves: CVE-2026-108261 Source advisory: MEND:CVE-2026-108261...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23618 more potentially affected by CVE-2026-108104 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108104 Source advisory: SNYK:JAVA-ORGXERIALSNAPPY-20825056...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23618 more potentially affected by CVE-2026-108106 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108106 Source advisory: SNYK:JAVA-ORGXERIALSNAPPY-20825055...

Malicious Package

Overview @library-wide/library-shell is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview asepxyznew is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @galicia-toolkit-nestjs/paas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...