sextant-cli (0.0.1-rc13) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc13)

sextant-cli-linux-arm64 NPM version 0.0.1-rc13 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc21) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc21)

sextant-cli-linux-arm64 NPM version 0.0.1-rc21 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc21 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc35) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc35)

sextant-cli-linux-arm64 NPM version 0.0.1-rc35 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc35 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

Malware in @umacloud/cli-linux-arm64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

sextant-cli (0.0.1-rc11) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc11)

sextant-cli-linux-arm64 NPM version 0.0.1-rc11 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc11 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc12) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc12)

sextant-cli-linux-arm64 NPM version 0.0.1-rc12 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc12 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc25) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc25)

sextant-cli-linux-arm64 NPM version 0.0.1-rc25 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc25 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc29) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc29)

sextant-cli-linux-arm64 NPM version 0.0.1-rc29 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc29 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via XML encryption processing. An attacker can cause denial of service by supplying a crafted XML document that triggers excessive resource consumption or causes the application to...

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR and Blazor Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

SUSE-SU-2026:2327-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. An attacker can exhaust system resources by sending specially crafted requests over the network, resulting in service unavailability for legitimate users. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...

PT-2026-46945

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.35.11 Description An issue exists in the Envoy gateway related to HTTP/2, which can be exploited to cause a denial of service, potentially bringing down an Evonode. There have been reports of elevated activities...

Infinite loop

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Infinite loop in the FormDataReader.ProcessFormKeys...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttlin...