143358 matches found
ROOT-APP-NPM-CVE-2026-1526 CVE-2026-1526 in undici - Patched by Root
Root has patched CVE-2026-1526 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-25883 CVE-2022-25883 in semver - Patched by Root
Root has patched CVE-2022-25883 in the semver package for Root:npm. Multiple fixed versions available...
pmg v0.27.0
Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody...
ROOT-APP-NPM-CVE-2022-24999 CVE-2022-24999 in qs - Patched by Root
Root has patched CVE-2022-24999 in the qs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-44906 CVE-2021-44906 in minimist - Patched by Root
Root has patched CVE-2021-44906 in the minimist package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-12816 CVE-2025-12816 in node-forge - Patched by Root
Root has patched CVE-2025-12816 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root
Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...
The vulnerability of the getTarSpec() function in the tools/rpmbuild.cc component of the RPM package manager allows a hacker to execute arbitrary code.
The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2026-76055
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76055
CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...
EUVD-2026-64896
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
Astra Linux – Vulnerability in apt
The vulnerability of the PackageFromTask function in the software for installing, updating, and deleting Apt software packages is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerability in Perl
CPAN.pm before version 2.35 does not verify TLS certificates when downloading distributions via HTTPS...
ROOT-APP-NPM-CVE-2021-23358 CVE-2021-23358 in underscore - Patched by Root
Root has patched CVE-2021-23358 in the underscore package for Root:npm. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-64846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can...
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
UBUNTU-CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
ROOT-APP-NPM-CVE-2026-6734 CVE-2026-6734 in undici - Patched by Root
Root has patched CVE-2026-6734 in the undici package for Root:npm. Multiple fixed versions available...
safer-dependencies v0.6.0
Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...