613857 matches found
CVE-2026-16796
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1
CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1
CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1
CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1
CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1
CVE-2026-50252 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
Malicious code in eth-slint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bdbbc1ccc748bfe5ad640ed4e54ed5285a526a78a198ac2bf64727b7730d54d eth-slint is a typosquat of web3-core-subscriptions. src/index.js contains a clean 2119-byte copy of the legitimate web3.js subscriptions module, whi...
MAL-2026-11034 Malicious code in eth-slint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bdbbc1ccc748bfe5ad640ed4e54ed5285a526a78a198ac2bf64727b7730d54d eth-slint is a typosquat of web3-core-subscriptions. src/index.js contains a clean 2119-byte copy of the legitimate web3.js subscriptions module, whi...
Malicious code in govapkg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...
MAL-2026-11031 Malicious code in govapkg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...
CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...
0beny1s (1.1.6), 0desgin (0.0.1) +15936 more potentially affected by CVE-2026-53669 via react-router (>=6.0.0, <=7.17.0)
react-router NPM version =6.0.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...
@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +64 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)
react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory:...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the redirect. An attacker can cause users to be redirected to malicious external sites or execute unauthorized scripts by enticing them to click crafted links. Remediation Upgrade org.webjars.npm:react-router to versio...
@0xmike/web-kit (>=0.0.6, <=0.1.1), @acmekit/acmekit (>=2.13.1, <=2.13.94) +284 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)
react-router-dom NPM version =6.30.2, =0.0.6, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =1.4.0, =0.0.1, =1.2.0, =0.1.0, =0.0.6, =2.0.1, =4.1.0 - @automattic/data-stores 3.2.2 - @automattic/domain-search 1.1.0 - @automattic/jetpack-ai-calypso 2.1.0 and more Source cves: CVE-2026-53668 Source advisory:...
@accounter/client (>=0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, <=0.0.10-alpha-20260124220016-4e2b62f7c68c0c6fd69aea71f714b37188ddd976), @boxyhq/react-ui (3.5.2) +64 more potentially affected by CVE-2026-53668 via react-router (>=7.9.6, <=7.12.0-pre.0)
react-router NPM version =7.9.6, =0.0.8-alpha-20251116084105-a1cea854a8885090847180b84764d326dbe1ab77, =1.0.1-MON-198407-add-selinux-sudo-check.0, =3.4.9, =0.1.9, =1.21.9, =1.21.9, =0.3.1, =1.5.0, =0.4.0, =0.0.5, =0.0.7 and more Source cves: CVE-2026-53668 Source advisory: OSV:GHSA-JJMJ-JMHJ-QWJ2...
@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.6), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.2) +265 more potentially affected by CVE-2026-53667 via react-router (>=7.11.0, <=7.17.0)
react-router NPM version =7.11.0, =1.0.0, =1.0.1, =0.0.9-alpha-20251217170854-13a5505369f22d85f29bcbbbe455c23672e2aca3, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...
0beny1s (1.1.6), 0desgin (0.0.1) +15130 more potentially affected by CVE-2026-53666 via react-router (>=6.4.0, <=7.17.0)
react-router NPM version =6.4.0, =7.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-router and may be impacted: - 0beny1s 1.1.6 - 0desgin 0.0.1 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0...