CVE-2026-71852 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root

Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...

GHSA-JM78-9FVV-MHGR vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-4GMW-GG2M-W46P vulnerabilities

Vulnerabilities for packages: checkov...

[SECURITY] Fedora 44 Update: nghttp2-1.68.0-5.fc44

This package contains the HTTP/2 client, server and proxy programs...

OPENSUSE-SU-2026:11473-1 dhcpcd-10.5.0-1.1 on GA media

These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-17510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in printattribute via a zero length BMPSTRING attribute. printattribute...

Fedora 44 : nghttp2 (2026-084c991d17)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-084c991d17 advisory. - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the preceding...

Update of els-os-release

Initial package...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-P9JM-Q85P-7MCP vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: keep, unleash-fips, saf, vitess, json-server, jitsucom-jitsu, gitlab-rails-ce, unleash, keep-fips, renovate, dotstatsuite-supercore, langfuse, langfuse-fips, gitlab-rails-ce-fips, nextcloud-server, vite, arangodb, authentik, homepage...

Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f33793b44bee99cf40ae7b4ecfdd4d8ab388edf96753862f96b289ad3e95d2 Package contains only 2 files and no code patterns indicating credential access, network exfiltration, install-time code execution, silent relay, or...

Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6f280e621703ad0ddfe97298c5a5dded61dd1b8fc877729ad0202f6a23a77 Package [email protected] shows no evidence of exfiltration, install-time remote code execution,...

Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd82004d1cbf2e4b6a3c77f48293b0d9638fe59592eb40291b6a332121f6fe6 Package contains no code paths that read installer secrets, fetch and execute remote content, relay caller data to third-party destinations, or...