629301 matches found
CVE-2026-7514 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...
CVE-2026-7514
CVE-2026-7514 is a missing authorization vulnerability in the Generic Package Registry of GitLab CE/EE , affecting versions 13.9 through before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . An authenticated user with developer-role permissions could substitute package file content and hide...
Malicious code in chai-as-agile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d46bc75e0c086e929855baefd9f9f847ebe6e85f8a004c9de72502d0fb6263 On require'chai-as-agile', index.js loads lib/initializeCaller.js which decodes a base64-obfuscated URL to...
Malicious code in strapi-plugin-pencc-meeb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded stri...
Malicious code in otel-span-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e800a0d88fb9a757c0ca5ecc09f0217522e72575d3e570a87c167090740de7d The package presents itself as an OpenTelemetry span adapter but on module load schedules a bootstrap routine via setImmediate that reads...
Malicious code in @prime0/pcomatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08299e41eb4feb9e324854bf5cd3386e6e52696b4b11443254374897a1ad3816 index.js and the postinstall lifecycle script contact a hardcoded bare-IP endpoint at http://69.48.229.140:8080 over plain HTTP. On npm install, the...
Malicious code in @prime0/alanced-match (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d49bf28eb233bca0591b32c11b411d1c10b8e8f978d1b76c6df2e6a00772f3 The package @prime0/alanced-match is a 1-character-drop typosquat of balanced-match. Its postinstall.js runs automatically on npm install and POSTs a...
Malicious code in cli-anything-ai-market (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922 setup.py runs automatically during pip install and POSTs the installer's OS, username USER/USERNAME, and hostname via COMPUTERNAME on Windows or the...
GHSA-RFVM-PVFP-C8VQ vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78123 vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78129 vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78133 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-JHPW-976M-542J vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2026-78132 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-RFVM-PVFP-C8VQ vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78124 vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78130 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-WC93-H4M4-584V vulnerabilities
Vulnerabilities for packages: strongswan...