613817 matches found
Malicious code in react-fast-refresh-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcca3ccc0a35a13d8b3f30ff6019ab57782882ada4e01b941fbee77ad1236115 Package typosquats a React/Meta-branded name and falsely attributes authorship to 'Meta Open Source'. Its package.json declares a postinstall hook...
MAL-2026-11366 Malicious code in react-fast-refresh-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcca3ccc0a35a13d8b3f30ff6019ab57782882ada4e01b941fbee77ad1236115 Package typosquats a React/Meta-branded name and falsely attributes authorship to 'Meta Open Source'. Its package.json declares a postinstall hook...
ROOT-APP-NPM-CVE-2026-55699 CVE-2026-55699 in @rootio/pnpm - Patched by Root
Root has patched CVE-2026-55699 in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-QRV3-253H-G69C GHSA-qrv3-253h-g69c in @rootio/pnpm - Patched by Root
Root has patched GHSA-qrv3-253h-g69c in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...
RHSA-2026:47768 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CVE-2026-13346
A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to...
MAL-2026-11195 Malicious code in phabricator-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e718b20986295f99dd35066e46d0be5629555dccab79a1727cd3f5044cb7a0 phabricator-client 99.0.4 is a single-file PyPI package whose only runtime effect on import is to resolve lobohunter.duckdns.org and open a TCP...
Malicious code in phabricator-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e718b20986295f99dd35066e46d0be5629555dccab79a1727cd3f5044cb7a0 phabricator-client 99.0.4 is a single-file PyPI package whose only runtime effect on import is to resolve lobohunter.duckdns.org and open a TCP...
CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1
Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...
CLEANSTART-2026-QI90911 Security fixes in thanos-operator-fips 0.3.7-r0
Package thanos-operator-fips version 0.3.7-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...
CLEANSTART-2026-ZD87448 Security fixes in binutils 2.40-r0
Package binutils version 2.40-r0 fixes 1 vulnerabilities: CVE-2023-1579...
CLEANSTART-2026-ZW77798 Security fixes in dex 2.43.1-r1
Package dex version 2.43.1-r1 fixes 1 vulnerabilities: ghsa-fw7p-63qq-7hpr...
CLEANSTART-2026-XJ05448 Security fixes in dex 2.44.0-r3
Package dex version 2.44.0-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...
CLEANSTART-2026-ZJ57830 Security fixes in binutils 2.39-r2
Package binutils version 2.39-r2 fixes 1 vulnerabilities: CVE-2022-38533...
CLEANSTART-2026-BF59911 Security fixes in az 2.83.0-r2
Package az version 2.83.0-r2 fixes 4 vulnerabilities: CVE-2026-48524, CVE-2026-48522, CVE-2026-48525, CVE-2026-48526...
CLEANSTART-2026-CI65568 Security fixes in minio-operator-fips 7.1.1-r10
Package minio-operator-fips version 7.1.1-r10 fixes 11 vulnerabilities: CVE-2026-39836, CVE-2026-33811, CVE-2026-33814, CVE-2026-42499, CVE-2026-39820...
CLEANSTART-2026-FY22516 Security fixes in az 2.84.0-r1
Package az version 2.84.0-r1 fixes 1 vulnerabilities: CVE-2026-4539...
CLEANSTART-2026-KV83814 Security fixes in py3-jupyterhub 5.4.6-r3
Package py3-jupyterhub version 5.4.6-r3 fixes 1 vulnerabilities: ghsa-537c-gmf6-5ccf...