CLSA-2026-1792254634 TuxCare security update for @happy-dom/global-registrator (1 CVE)

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 20.8.8-tuxcare.1...

CLSA-2026-1792254633 TuxCare security update for @happy-dom/global-registrator (1 CVE)

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.4...

CLSA-2026-1792254628 TuxCare security update for @happy-dom/global-registrator (1 CVE)

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.3...

CLSA-2026-1792254627 TuxCare security update for @happy-dom/global-registrator (1 CVE)

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.1...

CLSA-2026-1792254618 TuxCare security update for @happy-dom/global-registrator (2 CVEs)

TuxCare rebuilt @happy-dom/global-registrator to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...

CLSA-2026-1792254607 TuxCare security update for @happy-dom/global-registrator (3 CVEs)

TuxCare rebuilt @happy-dom/global-registrator to address 3 CVEs. Fixed in 9.10.9-tuxcare.1...

PT-2026-127111

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 20.8.8-tuxcare.1...

PT-2026-127107

TuxCare rebuilt @happy-dom/global-registrator to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...

PT-2026-127106

TuxCare rebuilt @happy-dom/global-registrator to address 3 CVEs. Fixed in 9.10.9-tuxcare.1...

PT-2026-127109

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.3...

PT-2026-127110

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.4...

PT-2026-127108

TuxCare rebuilt @happy-dom/global-registrator to address 1 CVE. Fixed in 9.20.3-tuxcare.1...

Docker Registrator Code Execution

The vulnerability of the gettreesha function in the Docker Registrator’s automatic registration tool is related to the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

@happy-dom/global-registrator (>=19.0.0, <=19.0.2), @happy-dom/jest-environment (>=19.0.0, <=19.0.2) +4 more potentially affected by CVE-2025-62410 via happy-dom (>=19.0.2, <=20.0.0)

happy-dom NPM version =19.0.2, =19.0.0, =19.0.0, =19.0.0, =1.0.0, =0.1.9, =1.1.81, =1.1.82 Source cves: CVE-2025-62410 Source advisory: OSV:GHSA-QPM2-6CQ5-7PQ5...

JLSEC-2025-2 Command injection in `withpasswd()` function in Registrator.jl

Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, a shell script injection can occur within the withpasswd function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerabl...

JLSEC-2025-4 Argument injection in `gettreesha()` function in Registrator.jl

Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the gettreesha function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerable...

CVE-2025-52480

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the...

CVE-2025-52483

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52480

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the...

CVE-2025-52483

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...