Malicious code in chain-multer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cc34f0f3bb0c4829ea6a271ba921ebdd97ea8272285dbc159f5ede247d27ff The package chain-multer was found to contain malicious code...

MAL-2026-2343 Malicious code in chain-multer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cc34f0f3bb0c4829ea6a271ba921ebdd97ea8272285dbc159f5ede247d27ff The package chain-multer was found to contain malicious code...

Malicious code in chai-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dfa5b2cccd6b50e33c5fbb98357210b6eeac23c9764183693b3eb74da40f44 The package chai-set was found to contain malicious code...

MAL-2026-2341 Malicious code in chai-chain-cognivault (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b0851e6e0e1c6814315a7876df23ebeb1c80c5afd8093f9790c0b2fb6ba605 The package chai-chain-cognivault was found to contain malicious code...

MAL-2026-2340 Malicious code in chai-chain-argon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843de6d2665a1833194793cfe05d91e35574e922fbb24cc0879c32352189a29c The package chai-chain-argon was found to contain malicious code...

Malicious code in chai-chain-argon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843de6d2665a1833194793cfe05d91e35574e922fbb24cc0879c32352189a29c The package chai-chain-argon was found to contain malicious code...

Malicious code in chai-as-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf6eaadbaedff56f824c4c68f8af9138c01d40189e0225051d35c52dee1adc9 The package chai-as-chains was found to contain malicious code...

Malicious code in chai-as-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3334b8d2a1f3861b1427af8ae49ac714b72ab19d6a571835e6c84c5d4b83b1a The package chai-as-attached was found to contain malicious code...

MAL-2026-2338 Malicious code in chai-as-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3334b8d2a1f3861b1427af8ae49ac714b72ab19d6a571835e6c84c5d4b83b1a The package chai-as-attached was found to contain malicious code...

MAL-2026-2337 Malicious code in chai-as-aligned (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfc79b3c746510178bdaa8e79ecf903f3705e61a09a5846e263159301607f91 The package chai-as-aligned was found to contain malicious code...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.1

cert-manager Operator for Red Hat OpenShift 1.17.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Malicious code in azurestack-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500acb5021d6cc7c40146b6b6f8fd17563f17b68d95e52d78a749514b839cba3 The package azurestack-common was found to contain malicious code...

MAL-2026-2335 Malicious code in azurestack-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500acb5021d6cc7c40146b6b6f8fd17563f17b68d95e52d78a749514b839cba3 The package azurestack-common was found to contain malicious code...

EUVD-2026-14895

ConcreteCMS v9.4.7 contains a Denial of Service DoS vulnerability in the File Manager component. The 'download' method in 'concrete/controllers/backend/file.php' improperly manages memory when creating zip archives. It uses 'ZipArchive::addFromString' combined with 'filegetcontents', which loads...

GHSA-P68C-RMFH-J48H ConcreteCMS is vulnerable to Denial of Service During Bulk Downloads

ConcreteCMS v9.4.7 contains a Denial of Service DoS vulnerability in the File Manager component. The 'download' method in 'concrete/controllers/backend/file.php' improperly manages memory when creating zip archives. It uses 'ZipArchive::addFromString' combined with 'filegetcontents', which loads...

ConcreteCMS is vulnerable to Denial of Service During Bulk Downloads

ConcreteCMS v9.4.7 contains a Denial of Service DoS vulnerability in the File Manager component. The 'download' method in 'concrete/controllers/backend/file.php' improperly manages memory when creating zip archives. It uses 'ZipArchive::addFromString' combined with 'filegetcontents', which loads...

Allocation of Resources Without Limits or Throttling

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the File Manager’s bulk download functionality due to improper memory management when creating zip archives. An attacker can cau...

Malicious code in @pansycareful/github-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0fd8e716dd8a1f3d3d8e33d9dfec9cee22ca3b511d7ac05fb3b175da1d1842 The package @pansycareful/github-helper was found to contain malicious code...

Malicious code in @hsbc-mfe/host (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a848d447b30dd51c4c541fa6a6e6d377bfe77ee4b04b4904996f725b8519789 The package @hsbc-mfe/host was found to contain malicious code...

MAL-2026-2332 Malicious code in @hsbc-mfe/host (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a848d447b30dd51c4c541fa6a6e6d377bfe77ee4b04b4904996f725b8519789 The package @hsbc-mfe/host was found to contain malicious code...