CLSA-2026-1791056035 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 19 @angular packages to address 1 CVE. Fixed in 8.0.0-tuxcare.6...

CLSA-2026-1791054878 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 13.4.0-tuxcare.12...

Malicious Package

Overview voxcpmruntime is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Media LIbrary Assistant versions = 3.41...

CLSA-2026-1791051095 TuxCare security update for figlet (1 CVE)

TuxCare rebuilt figlet to address 1 CVE. Fixed in 1.9.1-tuxcare.1...

CLSA-2026-1791050166 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.2.1-tuxcare.4...

CLSA-2026-1791050097 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.2-tuxcare.4...

CLSA-2026-1791033793 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 17.3.12-tuxcare.18...

Malicious Package

Overview voxcpmtts3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CLSA-2026-1791029776 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 18.1.2-tuxcare.8...

CLSA-2026-1791028234 TuxCare security update for undici (3 CVEs)

TuxCare rebuilt undici to address 3 CVEs. Fixed in 7.28.0-tuxcare.7...

CLSA-2026-1791028139 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.6...

CLSA-2026-1791028128 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.7.4-tuxcare.4...

CLSA-2026-1791028126 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 10.1.1-tuxcare.1...

CLSA-2026-1791028079 TuxCare security update for undici (11 CVEs)

TuxCare rebuilt undici to address 11 CVEs. Fixed in 6.19.5-tuxcare.2...

CLSA-2026-1791028065 TuxCare security update for piscina (1 CVE)

TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.4.0-tuxcare.1...

CLSA-2026-1791028060 TuxCare security update for karma (1 CVE)

TuxCare rebuilt karma to address 1 CVE. Fixed in 5.2.3-tuxcare.1...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

MAL-2026-17489 Malicious code in express-enhanced (npm)

[email protected] impersonates express it copies express's package metadata, including the description "Fast, unopinionated, minimalist web framework" and author TJ Holowaychuk and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

[SECURITY] Fedora 45 Update: xmlsec1-1.3.11-7.fc45

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption"...