CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: nemo, litellm, open-webui...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

MAL-2026-13674 Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56afa18eac7769497f21431af2a739dd5040563541223e41786746e0c44957a2 Package contains 2 files with no static or behavioral indicators of supply-chain attack shapes. No lifecycle scripts fetching remote content, no...

GHSA-539M-9XH6-Q6RR vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gomplate, pulumi-language-yaml, teleport, goreleaser, flux-source-controller-fips, kubevela, flux-operator-fips, kyverno, argo-cd, kaniko-fips, nuclei, trivy-operator, guac, dagger, cloudbeat-fips, rancher-fleet, mapotf-fips, argo-cd-fips, coder,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: flux, tfsec, boring-registry, gitsign, gitaly, gitea, act, gomplate, argo-cd, pulumi-language-yaml, goreleaser, kyverno, argocd-image-updater, snyk-cli, witness, cerbos, nfpm, pulumi, pulumi-language-dotnet, crossplane, kubescape, src-fingerprint, zot, argo-workflows...

[SECURITY] Fedora 44 Update: erlang-26.2.5.21-5.fc44

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

Linux Distros Unpatched Vulnerability : CVE-2026-20345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

CVE-2026-50159 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-71437 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-71438 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

MAL-2026-13668 Malicious code in @lambda-platform/lambda-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a4d9bac602cd3fca6afbcee8dde788580934920352178864343fab46fa64b No static or traced-code signals of exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or...

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

PortSwigger says HTTP Terminator, an artificial intelligence AI-assisted research system built by James Kettle , generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate desync vectors. PortSwigger said a separate human-guided discovery cascade also exposed a...

CVE-2026-56850 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

Linux Distros Unpatched Vulnerability : CVE-2026-19145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-70632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder that allow...

Linux Distros Unpatched Vulnerability : CVE-2026-19154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially...

CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...