MAL-2026-6595 Malicious code in @digitalcnzz/commonmodule (npm)

This npm package is purpose-built malware that exfiltrates host information and environment secrets. It runs as a postinstall hook the keyword "postinstall" is obfuscated in the code and bails immediately if npmpackagename is unset, confirming it only fires during npm install. After a randomized...

MAL-2026-6598 Malicious code in @sailing-package/core (npm)

This npm package is purpose-built malware that exfiltrates host information and environment secrets. It runs as a postinstall hook the keyword "postinstall" is obfuscated in the code and bails immediately if npmpackagename is unset, confirming it only fires during npm install. After a randomized...

Linux Distros Unpatched Vulnerability : CVE-2026-11625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the...

[SECURITY] Fedora 44 Update: openbao-2.5.5-1.fc44

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

EUVD-2026-39498

pnpm: Repository config can expand victim environment secrets into registry requests before scripts run...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-49984

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.23, the local internal-storage backend validates user-supplied paths for .. traversal before it converts Windows-style backslashes to forward slashes. An attacker can therefore smuggle a traversal sequence past...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-55069 Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-55069 Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes-dashboard, nemo, harbor, docker-machine-driver-harvester, backup-restore-operator, frankenphp-8.3, coder, commercial-expanso-edge, gitlab-workhorse-ce-fips, zarf, knative-kafka-broker, flux, prometheus-fips, flux-fips, kyverno, frankenphp-8.5,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gatus-fips, kubernetes-dashboard, kyverno-policy-reporter-plugins-kyverno, policy-controller, grype, crossplane-fips, vault-fips, juicefs, policy-controller-fips, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-networkmanager-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatus-fips, kubernetes-dashboard, kyverno-policy-reporter-plugins-kyverno, policy-controller, grype, crossplane-fips, vault-fips, juicefs, policy-controller-fips, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-networkmanager-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: atlantis, nfpm, rootlesskit, pulumi-kubernetes-operator, crossplane-provider-aws-cloudformation, external-secrets-operator, tkn, crossplane-provider-aws-memorydb, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, kubescape,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: atlantis, age, nfpm, rootlesskit, pulumi-kubernetes-operator, external-secrets-operator, tkn, kubescape, crossplane-provider-azure-authorization, docker, gh, rancher-machine, syft, glab, ko, step, kine, datadog-agent, nerdctl, mattermost, buildkitd, docker-cli-buildx...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: nfpm, pulumi-kubernetes-operator, external-secrets-operator, kubescape, syft, step, kine, nerdctl, mattermost, docker-cli-buildx, guac, pulumi-language-java, skaffold, prometheus-operator, opentelemetry-collector, apko, gitea, prometheus, helm, zot, podman, opentofu,...

MAL-2026-6520 Malicious code in rollup-plugin-polyfill-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b21017bf70f3f7909beadfff916971711ef9d236ab81797b3bb53569034fa67c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6519 Malicious code in react-icon-svgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff5b9a03e2018642801f0a9d253297cf1eb8ce39a8af4152f31bcd045e4768d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6518 Malicious code in ai-node-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae845382ff29756db63bf611b9b6bdbd49c44be3bcc8b283512e6590182ac48b ai-node-relay ships dist/index.js as its npm main entry, processed with javascript-obfuscator string-array rotation, 0x-prefixed identifiers, base64...

Malicious code in ai-node-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae845382ff29756db63bf611b9b6bdbd49c44be3bcc8b283512e6590182ac48b ai-node-relay ships dist/index.js as its npm main entry, processed with javascript-obfuscator string-array rotation, 0x-prefixed identifiers, base64...