Malicious code in datefmt-simple-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...

MAL-2026-14032 Malicious code in datefmt-simple-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...

GO-2023-1730 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2024-3296 vulnerabilities

Vulnerabilities for packages: gh...

GO-2025-3467 vulnerabilities

Vulnerabilities for packages: gh...

GO-2024-3269 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-4408 vulnerabilities

Vulnerabilities for packages: wolfictl...

GO-2021-0227 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0615 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0956 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3467 vulnerabilities

Vulnerabilities for packages: gh...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2026-5848 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-JGRX-MGXX-JF9V vulnerabilities

Vulnerabilities for packages: arangodb...

SUSE CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

SUSE CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

Oracle Linux 10 : dracut (ELSA-2026-54576)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54576 advisory. 107-9.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS...