MAL-2026-10387 Malicious code in thebigyahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb60a0e719514988070d96c3cedea8d918edccef68203afe3cda86635c607de The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in midnightrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94313bf7eca9c82a6e6e6d8f3a7230fcdf936da5ff66069639e1957b4a8d2fe3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-10298 Malicious code in changiairportpromax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ab194f6c4e1d4197856c229f74ebf46e7eb90ff703ff4dc3172379aea96923 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in vibewise-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15898c2463520d4782a63156f0ed592f5dc543a0f17bcf72c3d32cb3711b2b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-59974

Impact The implementation of Conv2DBackpropInput requires input sizes to be 4-dimensional. Otherwise, it gives a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf strides = 1, 1, 1, 1 padding = "SAME" use cudnn on gpu = True explicit paddings =...

Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability

Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibitive cost. We present Antiproof, an end-to-end vulnerability discovery system that combines neuro-symbolic detector...

Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8527-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8527-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

GHSA-FPG8-7664-JC5Q vulnerabilities

Vulnerabilities for packages: dagdotdev...

Linux Distros Unpatched Vulnerability : CVE-2020-10941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information an RSA private key by measuring cache usage during an import. CVE-2020-10941 Note th...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, rancher, cilium-cli, cluster-api-helm-controller, trivy, zarf, helm-set-status, chartmuseum, linkerd2, gogatekeeper, cert-manager-cmctl, conftest, opa-envoy, zot, argo-cd, helm, ratify, steampipe, rancher-fleet, gatekeeper, kube-arangodb,...

SUSE CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...

GHSA-HF52-78X8-6W3W vulnerabilities

Vulnerabilities for packages: geoserver, apache-tomee...

CVE-2026-57156

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in updatereaddeltapoints in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeofDELTAPOINT, allowing a malicious RDP pee...

GHSA-QFF7-4Q6C-M8H6 vulnerabilities

Vulnerabilities for packages: ffmpeg...

Malicious code in dowload_ebok_wrath_of_the_gods_by_j_robert_kennedy_61o88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e394751a822cba7556f9b6676b531a472c7c113da4458970b242b42df9d88e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-53363

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfsconsumefrags iptfsconsumefrags transfers paged fragments from one socket buffer to another but fails to propagate the SKBFLSHAREDFRAG flag. This is the same class of bug that was...