606211 matches found
Malicious code in ts-enum-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f362b9a6fbb2e117301be8a8195f14b6fa8481e3dcc3b37faff3d6eb111b0070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DEBIAN-CVE-2026-53801
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...
Malicious code in ai-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8949a02ffb1efc0779485ac4daedb4c0c1810f0a1a87dc5ba60c6f72c6e1cf22 The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname prefixed to a hardcoded...
MAL-2026-13934 Malicious code in ai-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8949a02ffb1efc0779485ac4daedb4c0c1810f0a1a87dc5ba60c6f72c6e1cf22 The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname prefixed to a hardcoded...
NPM: hashi-vault-js: Vault token and secret values exposed in thrown errors
NPM: hashi-vault-js: Vault token and secret values exposed in thrown errors vulnerability discovered by ? in WordPress Npm hashi-vault-js versions = 0.5.1...
ROOT-APP-NPM-CVE-2026-59874 CVE-2026-59874 in tar - Patched by Root
Root has patched CVE-2026-59874 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53655 CVE-2026-53655 in tar - Patched by Root
Root has patched CVE-2026-53655 in the tar package for Root:npm. Multiple fixed versions available...
MAL-2026-13997 Malicious code in @nolimit-agent/win32-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4e440b5c1a499bb904b604509fd09284195641769bcea441044c9b15720106 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-13996 Malicious code in @nolimit-agent/linux-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a61df0713e6ffb3921a4819c4c80540bfd596d8b71e4f2015f3ed580c9f804d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @nolimit-agent/linux-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a61df0713e6ffb3921a4819c4c80540bfd596d8b71e4f2015f3ed580c9f804d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @nolimit-agent/win32-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4e440b5c1a499bb904b604509fd09284195641769bcea441044c9b15720106 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
ROOT-APP-NPM-CVE-2022-29622 CVE-2022-29622 in formidable - Patched by Root
Root has patched CVE-2022-29622 in the formidable package for Root:npm. Multiple fixed versions available...
CVE-2026-45819
baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...
CLEANSTART-2026-SA31637 Security fixes in knative-net-istio 1.21.4-r2
Package knative-net-istio version 1.21.4-r2 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...
CLEANSTART-2026-YI59826 Security fixes in gitea 1.26.4-r1
Package gitea version 1.26.4-r1 fixes 9 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56852, CVE-2026-71556, CVE-2026-71557, ghsa-259r-337f-4rfw...
CLEANSTART-2026-NP73250 Security fixes in kubernetes 1.34.10-r4
Package kubernetes version 1.34.10-r4 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-XG50773 Security fixes in cortex 1.20.1-r0
Package cortex version 1.20.1-r0 fixes 5 vulnerabilities: CVE-2025-69725, CVE-2026-2303, CVE-2026-29181, CVE-2026-24051, CVE-2026-39883...
CLEANSTART-2026-LZ94818 Security fixes in logstash-exporter-fips 1.9.1-r1
Package logstash-exporter-fips version 1.9.1-r1 fixes 1 vulnerabilities: CVE-2025-61726...