367691 matches found
@corexium/xbails (0.0.7), @synergyxd/baileys (0.0.3) potentially affected by unknown CVE via @bellaxchuu/libsignal-node (0.0.1-security)
@bellaxchuu/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @bellaxchuu/libsignal-node and may be impacted: - @corexium/xbails 0.0.7 - @synergyxd/baileys 0.0.3 Source cves: unknown CVE Source advisory:...
Malicious Package
Overview random-certs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ROOT-APP-NPM-CVE-2026-1615 CVE-2026-1615 in jsonpath - Patched by Root
Root has patched CVE-2026-1615 in the jsonpath package for Root:npm. Multiple fixed versions available...
CVE-2026-93372
A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library WebGL component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web...
ROOT-APP-NPM-CVE-2026-25940 CVE-2026-25940 in jspdf - Patched by Root
Root has patched CVE-2026-25940 in the jspdf package for Root:npm. Multiple fixed versions available...
MAL-2026-17662 Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...
@computesdk/tensorlake (>=0.0.1, <=0.1.28), @rmotgi/compile-daemon (>=0.2.0, <=0.2.3) +4 more potentially affected by unknown CVE via tensorlake (>=0.5.7, <=0.5.158)
tensorlake NPM version =0.5.7, =0.0.1, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: GHSA-RQXJ-G25X-4V9V...
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 . The flaw occurs during the parsing of uploaded X.509 PEM certificates for management display because the system fails to properly validate the length of the Authority...
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...
CVE-2026-87676
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...
EUVD-2026-94671
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...
CLEANSTART-2026-QI59332 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-JS33298 flaw was discovered in FasterXML jackson-databind in all versions before 2
Security vulnerability affects the apache-hive package. A flaw was discovered in FasterXML jackson-databind in all versions before 2...
CLEANSTART-2026-YW54942 Fasterxml Jackson version Before 2
Security vulnerability affects the apache-hive package. Fasterxml Jackson version Before 2...
CLEANSTART-2026-GF02196 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-TR04236 jackson-databind before 2
Security vulnerability affects the apache-hive package. jackson-databind before 2...