614229 matches found
MAL-2026-10685 Malicious code in trongridweb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e02b38a7782b65b538eb633187f20a9b54a583ed5e88acf8e3bde03425fe21c1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
EUVD-2026-44690
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
@n8n/agents (0.13.0), @n8n/ai-node-sdk (0.18.0) +17 more potentially affected by CVE-2026-59259 via n8n-workflow (2.28.0)
n8n-workflow NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/agents 0.13.0 - @n8n/ai-node-sdk 0.18.0 - @n8n/ai-utilities 0.21.0 - @n8n/ai-workflow-builder 1.28.0 - @n8n/api-types 1.28.0 -...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-59259 via n8n-core (>=1.0.0, <=1.122.34)
n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NCORE-18017737...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2130 more potentially affected by CVE-2026-59259 via n8n-workflow (>=2.0.0, <=2.27.1)
n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NWORKFLOW-18017739...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the freetype initialization. An attacker can cause the application to access freed memory by triggering a failure during image processing, potentially resulting in application crash or denial of service. Remediation A...
Malicious code in xyq-drama-skill (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ea591e5b995503deb15b174a37fc7af37cb5987a6c3d715d256fe0c3bfe10 setup.py registers a custom install cmdclass that, on pip install, downloads an opaque binary from...
MAL-2026-10681 Malicious code in xyq-drama-skill (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ea591e5b995503deb15b174a37fc7af37cb5987a6c3d715d256fe0c3bfe10 setup.py registers a custom install cmdclass that, on pip install, downloads an opaque binary from...
CVE-2022-2879 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2026-15124 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-15131 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6P2R-GG8G-33F2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-V66C-278H-3VJ4 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-15110 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q66R-H3M9-74HH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QCVM-7WGF-4C6M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R7M5-CCWW-9J78 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C48F-7JV4-R33V vulnerabilities
Vulnerabilities for packages: chromium...