Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f4a69a3b50ac2347f8b3324abca2c0df1cf83422ee0f164b799cb748fa76b5 The package presents itself as a Tailwind CSS forms plugin but its main entry src/index.js is a heavily obfuscated module obfuscator.io-style rotatin...

freerdp security update

2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346...

The vulnerability of the RPC Runtime Library for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the RPC Runtime Library in Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Oracle Linux 10 : ELSA-2026-66349-0: / freerdp (ELSA-2026-663490)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663490 advisory. 2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346 Tenable has extracted the preceding description block...

PT-2026-90246

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where an RPC-over-RDMA client can trigger a buffer overflow by requesting a reply, such as an NFS READ payload, without providing a Write list or...

PT-2026-96402

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in rpc clnt handle event and rpc clnt remove pipedir Normal client creation goes through rpc setup pipedir, which records clnt-pipefs sb, but the mount-event path in rpc clnt handle event calls rpc setu...

PT-2026-90245

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The RPC/RDMA Read list decoder fails to validate wire-supplied segment lengths. Specifically, the function xdr count read segments does not cap the segment length. This allows an oversiz...

PT-2026-90242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where the RPC/RDMA Read chunk position field, provided by a remote client, is not properly validated against the received inline body length. The...

CVE-2026-89526: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

Security Bulletin: Consul vulnerable to a denial of service in the native RPC listener

Summary Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

UBUNTU-CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

EUVD-2026-75680

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener . An authenticated client that can complete the internal RPC mTLS handshake may exhaust server memory before ACL authorization is evaluated , meaning a valid ACL token is not strictly required to trigger...

Consul vulnerable to a denial of service in the native RPC listener

Summary Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without...

Malicious code in tailwindcss-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc68c81374c5b78e36fea2f599c5e0004ead6e56dfd02b40cec4f73c62193b30 The package presents itself as a Tailwind CSS forms plugin README, repository field, and installation docs are copied verbatim from @tailwindcss/form...