DEBIAN-CVE-2026-36849

Bulletin has no description...

ROOT-APP-NPM-CVE-2026-4926 CVE-2026-4926 in @rootio/path-to-regexp - Patched by Root

Root has patched CVE-2026-4926 in the @rootio/path-to-regexp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4923 CVE-2026-4923 in @rootio/path-to-regexp - Patched by Root

Root has patched CVE-2026-4923 in the @rootio/path-to-regexp package for Root:npm. Multiple fixed versions available...

MAL-2026-5981 Malicious code in metrics-probe-64b2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae901b673ee21724897f69c782eb2808c55c2722bacc9912a4a3e60f7019883 package.json declares a postinstall hook "postinstall": "node run.js" that executes run.js automatically on every npm install. run.js imports os, fs,...

CGA-JXC8-HF9C-Q8R6

Bulletin has no description...

CGA-FCGJ-PWXV-JXFC

Bulletin has no description...

CGA-X9X2-H6WQ-M4F8

Bulletin has no description...

CGA-844F-MF5P-F2JR

Bulletin has no description...

CGA-4CHQ-8F8M-CXG9

Bulletin has no description...

MAL-2026-5954 Malicious code in @mastra/libsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3d2946dd7a5ef81d52da321aac5fce8fe40c59a844491d6e6a07c1c84b08ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ECHO-0C44-AA79-6B74

Bulletin has no description...

UBUNTU-CVE-2026-12301

Memory safety bug fixed in Thunderbird 152. This vulnerability was fix...

PT-2026-50567

Name of the Vulnerable Software and Affected Versions Steeltoe.Configuration.Abstractions versions 4.0.0 through 4.1.0 Description When MySQL or PostgreSQL service bindings from VCAP SERVICES include TLS client credentials, the Connectors library writes these credentials to temporary files in...

UBUNTU-CVE-2026-12321

JIT miscompilation in the JavaScript: WebAssembly component. This vuln...

UBUNTU-CVE-2026-12302

Mitigation bypass in the DOM: Security component. This vulnerability w...

UBUNTU-CVE-2026-12330

Incorrect boundary conditions in the Internationalization component. T...

UBUNTU-CVE-2026-12297

Sandbox escape due to incorrect boundary conditions in the Networking...

UBUNTU-CVE-2026-12314

Memory safety bug fixed in Thunderbird 152. This vulnerability was fix...

UBUNTU-CVE-2026-12306

Memory safety bug fixed in Thunderbird 152. This vulnerability was fix...

UBUNTU-CVE-2026-12311

Information disclosure, sandbox escape in the Security: Process Sandbo...