606536 matches found
ROOT-APP-NPM-CVE-2026-41672 CVE-2026-41672 in @xmldom/xmldom - Patched by Root
Root has patched CVE-2026-41672 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...
CLSA-2026-1786710099 TuxCare security update for 14 packages (9 CVEs)
TuxCare rebuilt 14 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
CVE-2026-72822 Grav before 1.0.13 Authentication Bypass via disable2fa
The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...
ROOT-OS-DEBIAN-13-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root
Root has patched CVE-2026-41080 in the expat package for Root:Debian:13. Multiple fixed versions available...
Malicious code in game_overlay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @veertly/web-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356a8a00db1082e33357c6fa0bd625070977f72964236e992e1be94dcd419764 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROOT-APP-MAVEN-CVE-2023-20863 CVE-2023-20863 in org.springframework:spring-expression - Patched by Root
Root has patched CVE-2023-20863 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available...
Malicious code in npm_pkg_1093 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbcfd38e8ac9c31e28e53af79f450b1bf48ee623593d4dfd77388c945f802653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14082 Malicious code in google-logging-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mw-filesystem-events-nodream-es6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rtms-manager-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2026:54660 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Bulletin has no description...
RHSA-2026:54659 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Bulletin has no description...
Insecure Trusted-Package Validation
Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...
CLSA-2026-1786699450 TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 47 io.netty packages to address 9 CVEs. Fixed in 4.1.130.Final-tuxcare.2...
GO-2025-3409 vulnerabilities
Vulnerabilities for packages: zot...
GO-2026-5491 vulnerabilities
Vulnerabilities for packages: vale...
GO-2024-2472 vulnerabilities
Vulnerabilities for packages: xeol-fips, xeol...