613944 matches found
@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +104 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)
@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...
Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
MAL-2026-10988 Malicious code in react-tabulix-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc package.json declares a preinstall hook node./dist/index.d.js that runs automatically on npm install. The script at dist/index.d.js decodes a...
Malicious code in react-tabulix-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc package.json declares a preinstall hook node./dist/index.d.js that runs automatically on npm install. The script at dist/index.d.js decodes a...
MGASA-2026-0287 Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
GHSA-VJ7Q-GJH5-988W vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, semgrep, litellm...
GHSA-HVRP-RF83-W775 vulnerabilities
Vulnerabilities for packages: semgrep, litellm...
CVE-2026-13149 vulnerabilities
Vulnerabilities for packages: langfuse, wazuh-dashboard-fips, authentik, graalvm, thingsboard-fips, langfuse-fips, renovate, thingsboard, opensearch-dashboards-fips, authentik-fips, lerna, gitlab-rails-ce, prism, rancher-api-ui, arangodb, wazuh-dashboard, kibana, pulumi, unleash-proxy, unleash,...
GHSA-3JXR-9VMJ-R5CP vulnerabilities
Vulnerabilities for packages: langfuse, wazuh-dashboard-fips, authentik, graalvm, thingsboard-fips, langfuse-fips, renovate, thingsboard, opensearch-dashboards-fips, authentik-fips, lerna, gitlab-rails-ce, prism, rancher-api-ui, arangodb, wazuh-dashboard, kibana, pulumi, unleash-proxy, unleash,...
CVE-2026-39244 vulnerabilities
Vulnerabilities for packages: redisinsight, saf, sqlpad, kibana...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-centraldashboard, lerna, kibana, wazuh-dashboard-fips, sqlpad, gitlab-rails-ce, graalvm, homepage, prism, saf, npm, wazuh-dashboard, actions-runner, opensearch-dashboards-fips, pulumi, opensearch-dashboards, gitlab-rails-ce-fips...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-centraldashboard, lerna, kibana, wazuh-dashboard-fips, sqlpad, gitlab-rails-ce, graalvm, homepage, prism, saf, npm, wazuh-dashboard, actions-runner, opensearch-dashboards-fips, pulumi, opensearch-dashboards, gitlab-rails-ce-fips...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-centraldashboard, lerna, kibana, wazuh-dashboard-fips, sqlpad, gitlab-rails-ce, graalvm, homepage, prism, saf, npm, wazuh-dashboard, actions-runner, opensearch-dashboards-fips, pulumi, opensearch-dashboards, gitlab-rails-ce-fips...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-centraldashboard, lerna, kibana, wazuh-dashboard-fips, sqlpad, gitlab-rails-ce, graalvm, prism, saf, npm, wazuh-dashboard, actions-runner, opensearch-dashboards-fips, pulumi, opensearch-dashboards, gitlab-rails-ce-fips...
