367690 matches found
a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107288 via pydantic-ai-slim (>=2.0.0b1, <=2.43.0)
pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107288 Source advisory: MEND:CVE-2026-107288...
a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=2.0.0b1, <=2.51.0)
pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107287 Source advisory: MEND:CVE-2026-107287...
acpkit (>=1.5.0, <=1.10.0), aer1-all (>=0.1.0, <=0.1.2) +33 more potentially affected by CVE-2026-107286 via pydantic-ai (>=2.10.0, <=2.52.0)
pydantic-ai PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.1.9.62, =0.2.1, =2.10.0, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-107286 Source advisory: MEND:CVE-2026-107286...
a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)
pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: MEND:CVE-2026-107286...
CLSA-2026-1791470326 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 2 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.7...
CLSA-2026-1791466657 TuxCare security update for undici (1 CVE)
TuxCare rebuilt undici to address 1 CVE. Fixed in 7.28.0-tuxcare.8...
MAL-2026-17679 Malicious code in @bellaxchuu/xbails (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73138335788b7e9bb6c1df9db9ae6f82fa260c75d703ddfb850cba883c7d076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CLSA-2026-1791466598 Fix CVE(s): CVE-2026-16118
SECURITY UPDATE: heap buffer overflow when byte-swapping MIME magic values on little-endian systems - debian/patches/CVE-2026-16118.patch: fix pointer arithmetic on the write side of the byte swap in xdgmimemagicparsemagicline - CVE-2026-16118...
CLSA-2026-1791466221 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.8...
CLSA-2026-1791465168 TuxCare security update for react-router (4 CVEs)
TuxCare rebuilt react-router to address 4 CVEs. Fixed in 7.15.0-tuxcare.1...
CLSA-2026-1791464078 TuxCare security update for org.springframework (15 CVEs)
TuxCare rebuilt 17 org.springframework packages to address 15 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.7...
CLSA-2026-1791463819 TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 17 org.springframework packages to address 35 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.1...
CLSA-2026-1791463722 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 18 org.springframework packages to address 20 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.4...
ROOT-APP-NPM-CVE-2025-71330 CVE-2025-71330 in image-size - Patched by Root
Root has patched CVE-2025-71330 in the image-size package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59869 CVE-2026-59869 in js-yaml - Patched by Root
Root has patched CVE-2026-59869 in the js-yaml package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-84375 CVE-2026-84375 in js-yaml - Patched by Root
Root has patched CVE-2026-84375 in the js-yaml package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-64718 CVE-2025-64718 in js-yaml - Patched by Root
Root has patched CVE-2025-64718 in the js-yaml package for Root:npm. Multiple fixed versions available...
DEBIAN-CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...