MAL-2026-14465 Malicious code in schoolwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fab9688948b5e3cab55bea7282280a554f1e60f85b947724b5f9262cd6a1823 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14453 Malicious code in desmoshomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae975f53feac57fc6aec90279e55e994d6e61d177217b012dfb59c6f42a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14447 Malicious code in classlesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5980732c2d869f27728cb78552b2adf259f87f10029674e2e84a4db390377c67 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14451 Malicious code in classwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8dab0502db54359ed8c53423750080abd441eae407040f20f205f5b0e10255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14458 Malicious code in desmoswork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541d82d133f0d80ad0e7dd4dc1595038f64af50558f26398c0a1c3627928aa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14454 Malicious code in desmosisfire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0679b40ac71c7b8ce0dc0557c8779a85ad10fac03ff678128ec4aa687c5e243 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14460 Malicious code in ilovedesmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efb46da64ab0f3eaee41abecec08214a4af0f228c701fd39ad711c0ae124927 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14450 Malicious code in classroomwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475464061a4252e9e926ad06f46e5b9223c8c0fc5b4921df5acfadbb3cacf8d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14462 Malicious code in pleasedoyourhomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97c52ac22393718c1c8fd5478b19b5b352b1f8c01de5f2aa39e54c3305eaf1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14463 Malicious code in schoolhomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207beec4a342cd3a46c5a21ea6b76c3e84e88374f40a76b6c5761859a76ea2c4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14449 Malicious code in classroomlesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee9290a110b32c6fab4129e634205ed0b86080ccf328dfe5e17635bc85b7926 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14456 Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14459 Malicious code in iamhungryrn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462bbc47c25a6f0d3de4221795fe1a35ea55027682c037d1a8ed8693b0993d89 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14446 Malicious code in classhomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef17879328ca7cff2fac02018b2155038da8e7faf071aa080d9c3272ba87a3d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

DEBIAN-CVE-2026-56706

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-76839 Grav before 2.0.16 Information Disclosure via offsetGet

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...

CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-56706

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-56706

Adminer before 5.4.3 contains a CSRF token design flaw: each token transmits both the XOR mask and the masked value in the format (rand XOR secret):rand, so a single observed token (via network sniffing, log files, Referrer header, or XSS) lets an attacker recover the session secret with one XOR ...