Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: litellm, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, semgrep...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: litellm, semgrep...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: pelias-api, pulumi, serve, thingsboard, unleash, unleash-fips, sqlpad, thingsboard-fips, bash-language-server, langfuse, nextcloud-server, langfuse-fips, saf, lerna, redisinsight, rancher-api-ui, foxx-cli, gitlab-rails-ce-fips, graalvm, authentik-fips, gitlab-rails-c...

CVE-2026-13149 vulnerabilities

Vulnerabilities for packages: pelias-api, pulumi, serve, thingsboard, unleash, unleash-fips, sqlpad, thingsboard-fips, bash-language-server, langfuse, nextcloud-server, langfuse-fips, saf, lerna, redisinsight, rancher-api-ui, foxx-cli, gitlab-rails-ce-fips, graalvm, authentik-fips, gitlab-rails-c...

CVE-2026-39244 vulnerabilities

Vulnerabilities for packages: redisinsight, kibana, saf, sqlpad...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: saf, code-server, opensearch-dashboards, opensearch-dashboards-fips, pulumi, wazuh-dashboard-fips, gitlab-rails-ce, actions-runner, lerna, sqlpad, homepage, kibana, npm, wazuh-dashboard, gitlab-rails-ce-fips, prism, graalvm, kubeflow-centraldashboard...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: saf, code-server, opensearch-dashboards, opensearch-dashboards-fips, pulumi, wazuh-dashboard-fips, gitlab-rails-ce, actions-runner, lerna, sqlpad, homepage, kibana, npm, wazuh-dashboard, gitlab-rails-ce-fips, prism, graalvm, kubeflow-centraldashboard...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: saf, code-server, opensearch-dashboards, opensearch-dashboards-fips, pulumi, wazuh-dashboard-fips, gitlab-rails-ce, actions-runner, lerna, sqlpad, homepage, kibana, npm, wazuh-dashboard, gitlab-rails-ce-fips, prism, graalvm, kubeflow-centraldashboard...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: saf, code-server, opensearch-dashboards, opensearch-dashboards-fips, pulumi, wazuh-dashboard-fips, gitlab-rails-ce, actions-runner, lerna, sqlpad, kibana, npm, wazuh-dashboard, gitlab-rails-ce-fips, prism, graalvm, kubeflow-centraldashboard...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: lerna, prism, npm, saf, kubeflow-centraldashboard, pulumi, code-server, sqlpad...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: lerna, prism, npm, saf, kubeflow-centraldashboard, pulumi, code-server, sqlpad...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: lerna, prism, npm, saf, kubeflow-centraldashboard, pulumi, code-server, sqlpad...

Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

MAL-2026-10989 Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...

Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...