CLEANSTART-2026-ST63902 Security fix for CVE-2025-62728 applied in: apache-hive 4.0.1-r8, apache-hive 4.1.0-r7

CVE-2025-62728 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JJ71926 Security fix for CVE-2026-83557 applied in: apache-zookeeper 3.9.5-r7, solr 10.0.0-r8, solr 9.10.1-r8, solr 9.8.1-r3, trino 480-r12, wso2is 7.0.0-r1, wso2is 7.1.0-r1, wso2is 7.2.0-r2, wso2is 7.3.0-r5

CVE-2026-83557 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FQ72391 Security fix for CVE-2026-84303 applied in: cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.21.1-r1, cloudnative-pg 1.27.4-r3, cloudnative-pg 1.28.4-r2, cloudnative-pg 1.29.2-r3, cloudnative-pg 1.30.0-r2, cloudnative-pg-fips 1.30.0-r1, dex 2.42.1-r5, dex 2.43.1-r5, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, gitea 1.27.2-r2, go-discover 0_git20250325-r4, knative-serving 1.21.3-r4, kube-metrics-adapter 0.2.9-r3, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, metallb 0.16.0-r4, minio-client 0.20250721.052808-r1, opa 1.20.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-operator 0.91.0-r6, prometheus-operator 0.92.1-r4, rabbitmq-cluster-operator 2.20.1-r7, rabbitmq-cluster-operator 2.21.1-r4, rabbitmq-messaging-topology-operator 1.19.3-r5, rclone 1.73.5-r7, rclone 1.74.4-r2, restic-fips 0.18.1-r7, tempo 3.0.3-r1, terraform 1.16.0-r1, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-csi 0.4.3-r5, velero-plugin-for-csi 0.5.1-r5, velero-plugin-for-csi 0.6.3-r6, victoriametrics-operator 0.73.1-r1

CVE-2026-84303 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root

Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-39693 CVE-2024-39693 in next - Patched by Root

Root has patched CVE-2024-39693 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root

Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23646 CVE-2022-23646 in next - Patched by Root

Root has patched CVE-2022-23646 in the next package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview lisa-gandul17-riris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lisa-gulai65-sukiwir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview test8999-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @sanzoffc/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lisa-gado-gado20-sukiwir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview linearturkeyz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lina-tiwul34-pore is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview linuxjoy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview xa424234657567 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ac-polyfills is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lint-prettier-stylelint-phenomic-arcturus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview @shared-web/assets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lint-staged-tailwindcss-altair-dotenv-safe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...