CVE-2026-21386: Observable Discrepancy

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexisten...

CVE-2026-27467

BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the microphone muted, the client sends audio to the server regardless of mute state. Media is discarded at the server side, so it isn't audible to any participants, but this may allo...

CVE-2026-27467

BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the microphone muted, the client sends audio to the server regardless of mute state. Media is discarded at the server side, so it isn't audible to any participants, but this may allo...

EUVD-2025-77563

Malicious code in muteferretaquamarine-83 npm...

Malicious code in mute_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c36c87630b59331e8df438560c4f1e866994cd9944846ca807b23510ca83781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78757

Malicious code in mutewoodpeckerz3n npm...

EUVD-2025-62990

Malicious code in mute-blue-platypus npm...

EUVD-2025-62986

Malicious code in mutesharkz3n npm...

MAL-2025-95564 Malicious code in mute-blue-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaab72cf6f84f0c86e7ce571c488865c1845ea6e5a001043aeb37f7a6e03b5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62985

Malicious code in muteshrimpz3n npm...

EUVD-2025-62988

Malicious code in muteclownfishz3n npm...

Malicious code in mute-blue-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaab72cf6f84f0c86e7ce571c488865c1845ea6e5a001043aeb37f7a6e03b5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69512 Malicious code in mute-chocolate-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7343d6d5ea7a64c5236e89874baec48228d5d32ba054c8af8c4a4720cdaafdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53138

Malicious code in mute-amethyst-slug npm...

EUVD-2025-53137

Malicious code in mute-chocolate-bison npm...

Malicious code in mute_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49fc364505e3f0a7354b3fbe9c01c6068d43e5b26760f38d8ea8df9e439b0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46276

Malicious code in mutemoosez3n npm...

SUSE CVE-2025-40098

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41getacpimutestate Return value of a function acpievaluatedsm is dereferenced without checking for NULL, but it is usually checked for this function. acpievaluatedsm may...

CVE-2025-40098

CVE-2025-40098 affects the Linux kernel ALSA HDA driver for cs35l41. The issue is a NULL pointer dereference: acpi_evaluate_dsm() may return NULL and is dereferenced without a NULL check, risking a crash. The advisory notes this was fixed by adding a NULL check in cs35l41_get_acpi_mute_state() (a...

CVE-2025-40098

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41getacpimutestate Return value of a function acpievaluatedsm is dereferenced without checking for NULL, but it is usually checked for this function. acpievaluatedsm may...