Malicious code in veldora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...

MAL-2026-11018 Malicious code in veldora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...

SUSE CVE-2026-47013

unknown...

SUSE CVE-2026-47035

unknown...

SUSE CVE-2026-50524

unknown...

SUSE CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

SUSE CVE-2026-62574

unknown...

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...

How to Make AI Tools Work Reliably for Growing Teams

Learn how growing teams make AI tools reliable with clear workflows, shared rules, secure systems, and repeatable processes that improve quality and speed daily...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59883 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59205 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, mlflow, label-studio, openstack-horizon-2026.1, superset, open-webui, superset-fips, tritonserver-backend-vllm-cuda-13.0, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips,...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, mlflow, label-studio, openstack-horizon-2026.1, superset, open-webui, superset-fips, tritonserver-backend-vllm-cuda-13.0, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips,...

CVE-2026-55379 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, mlflow, label-studio, openstack-horizon-2026.1, superset, open-webui, superset-fips, tritonserver-backend-vllm-cuda-13.0, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips,...

GHSA-42H9-826W-CGV3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, arangodb, kibana, jitsucom-jitsu, opensearch-dashboards, awx, langfuse, prism, langfuse-fips, wazuh-dashboard, azurite, gitlab-rails-ce-fips, nextcloud-server, kubeflow-centraldashboard, librechat, lerna, opensearch-dashboards-fips,...

GHSA-XJ6Q-8X83-JV6G vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, kubeflow-centraldashboard, awx, langfuse, librechat, kibana, prism, lerna, langfuse-fips, opensearch-dashboards-fips, semaphore, nextcloud-server, wazuh-dashboard, wazuh-dashboard-fips, redisinsight, jitsucom-jitsu,...

GHSA-F4GW-2P7V-4548 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kibana, jitsucom-jitsu, opensearch-dashboards, awx, langfuse, prism, langfuse-fips, wazuh-dashboard, azurite, gitlab-rails-ce-fips, nextcloud-server, kubeflow-centraldashboard, librechat, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips,...

GHSA-42H9-826W-CGV3 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards, lerna, prism, nextcloud-server...

GHSA-GCFJ-64VW-6MP9 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards, lerna, prism, nextcloud-server...

EUVD-2026-47238

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...