ROOT-APP-NPM-CVE-2026-102278 CVE-2026-102278 in brace-expansion - Patched by Root

Root has patched CVE-2026-102278 in the brace-expansion package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791448168 TuxCare security update for pypdf (6 CVEs)

TuxCare rebuilt pypdf to address 6 CVEs. Fixed in 5.9.0.post19+tuxcare...

CLSA-2026-1791447254 TuxCare security update for mlflow (1 CVE)

TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.22.4.post11+tuxcare...

Remote Code Execution(RCE)

Ghost is vulnerable to a remote code execution. The vulnerability is due to improper handling of attacker-controlled SVG content in the bundled image processing library, which allows an attacker to create a malicious bookmark card through a website they control and execute arbitrary commands on t...

CLSA-2026-1791445468 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.13-tuxcare.1...

CLSA-2026-1791444115 TuxCare security update for @opentelemetry/core (1 CVE)

TuxCare rebuilt @opentelemetry/core to address 1 CVE. Fixed in 1.27.0-tuxcare.1...

ROOT-APP-NPM-GHSA-V836-6XW4-9CX3 GHSA-v836-6xw4-9cx3 in vm2 - Patched by Root

Root has patched GHSA-v836-6xw4-9cx3 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-45411 CVE-2026-45411 in vm2 - Patched by Root

Root has patched CVE-2026-45411 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in vm2 - Patched by Root

Root has patched CVE-2026-44001 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in vm2 - Patched by Root

Root has patched CVE-2026-44002 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-43997 CVE-2026-43997 in vm2 - Patched by Root

Root has patched CVE-2026-43997 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44006 CVE-2026-44006 in vm2 - Patched by Root

Root has patched CVE-2026-44006 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44004 CVE-2026-44004 in vm2 - Patched by Root

Root has patched CVE-2026-44004 in the vm2 package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791442911 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.16-tuxcare.1...

CLSA-2026-1791442732 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 3.2.25.post10+tuxcare...

CLSA-2026-1791441237 TuxCare security update for python-jose (1 CVE)

TuxCare rebuilt python-jose to address 1 CVE. Fixed in 3.3.0.post3+tuxcare...

Malicious Package

Overview hardhat-bits is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview hardhat-option is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview css-reading-display-polyfill is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

@corexium/xbails (0.0.7), @synergyxd/baileys (0.0.3) potentially affected by unknown CVE via @bellaxchuu/libsignal-node (0.0.1-security)

@bellaxchuu/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @bellaxchuu/libsignal-node and may be impacted: - @corexium/xbails 0.0.7 - @synergyxd/baileys 0.0.3 Source cves: unknown CVE Source advisory:...