ROOT-APP-NPM-AIKIDO-2026-10730 AIKIDO-2026-10730 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10730 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10844 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10845 AIKIDO-2026-10845 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10845 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root

Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54399 CVE-2026-54399 in org.apache.httpcomponents.core5:httpcore5 - Patched by Root

Root has patched CVE-2026-54399 in the org.apache.httpcomponents.core5:httpcore5 package for Root:Maven. Multiple fixed versions available...

EUVD-2026-84244

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...

EUVD-2026-84184

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An authenticated attacker can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be accessed directly...

PT-2026-96692

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Privilege escalation is possible due to a weak configuration during the package extraction process. Recommendations At the moment, there is no information about...

CVE-2026-25264: Uncontrolled Search Path Element

Privilege escalation due to weak configuration during package extraction process...

AlmaLinux 10 : yggdrasil-worker-package-manager (ALSA-2026:69099)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of Servi...

RockyLinux 10 : yggdrasil-worker-package-manager (RLSA-2026:69099)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of...

The vulnerability of the new VM component in the vm2 library of the NPM package manager allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Malicious Package

Overview @baanx/solana-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview radio-player-theme is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview npmscripttesstalertunpkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @siriusbeyond/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @nimbusedge2/authxsas1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview @uh-platform/domain-widget is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @insiderintelligence/componentlibrary is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...