Fermion

Fermion Fermion is an electron application that wraps frida-node and monaco-editor. It offers a fully integrated environment to prototype, test and refine Frida scripts through a single UI. With the integration of Monaco come all the features you would expect from Visual Studio Code: Linting,...

9router-pro (0.5.109-pro.11), @_sh/strapi-plugin-ckeditor (8.0.0) +1220 more potentially affected by CVE-2026-109345 via dompurify (>=3.4.0, <=3.4.15)

dompurify NPM version =3.4.0, =0.0.1, =0.1.0, =0.10.2, =0.1.0-alpha.36, =0.1.0, =6.3.4, =0.1.0, =6.4.40, =0.13.1, =0.2.0, =5.52.1-fa.2, =5.52.1-fa.6 and more Source cves: CVE-2026-109345 Source advisory: MEND:CVE-2026-109345...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.0.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.0.0) +13 more potentially affected by CVE-2026-65911 via org.webjars.npm:dompurify (>=3.1.7, <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.55.1 Source cves: CVE-2026-65911 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18307176...

Security Bulletin: IBM i is Affected By A Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-0540]

Summary Navigator for IBM i uses the Monaco editor to edit config files. The Monaco editor uses DOMPurify to sanitize the HyperText Markup Language HTML in the editor. DOMPurify is vulnerable to improper neutralization of input by using rawtext elements missing from the SAFEFORXML regex...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=15.0.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=15.0.0) +13 more potentially affected by CVE-2026-0540 via org.webjars.npm:dompurify (>=3.1.7, <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.76.0, =3.37.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.55.1 Source cves: CVE-2026-0540 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15371377...

MAL-2025-26629 Malicious code in monaco-editor-loader (npm)

The package monaco-editor-loader was found to contain malicious code...

Malicious code in monaco-editor-loader (npm)

The package monaco-editor-loader was found to contain malicious code...

org.webjars.npm:monaco-editor (0.54.0) potentially affected by CVE-2025-26791 via org.webjars.npm:dompurify (3.1.7)

org.webjars.npm:dompurify MAVEN version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:dompurify and may be impacted: - org.webjars.npm:monaco-editor 0.54.0 Source cves: CVE-2025-26791 Source advisory:...