42125 matches found
CVE-2026-11940 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: sqlpad, saf, lerna, kubeflow-centraldashboard, npm, pulumi, prism, code-server...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: sqlpad, saf, lerna, kubeflow-centraldashboard, npm, pulumi, prism, code-server...
GHSA-3WQH-87FG-FFGG vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3CFQ-4XX4-RMPG vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2026-55199 vulnerabilities
Vulnerabilities for packages: libssh2...
Windows Operating Systems Elevation of Privilege Vulnerability
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
BIT-SETUPTOOLS-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...
MAL-2026-10558 Malicious code in akshajrawat.utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105157af41712b64f8b36ec1cb01e28958e4ad828a0c08d0979a1f6e22d1f13d The package's package.json declares a postinstall lifecycle hook that runs automatically on npm install: node -e...
Malicious code in sync-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fba87304c3a7ede2f03b87c89b49a3fb9b7f201befbaf79312da2cce65abc4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in relative-time-live (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffd93ad946d5607c42e226106c1f1b33370e92e92cf0a407928b7349523fec4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-10560 Malicious code in clipboard-drop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea807812d5f872524eab6c57931788239310050ffb4c477643977def9dac8fb9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GHSA-WC69-RHJR-HC9G vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips...
CVE-2026-44771
Technical details about CVE-2026-44771 are not publicly available in the provided documents; monitor for updates as new information may be released.
PT-2026-58325
Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...
This Week in Spring - July 14th, 2026
This Week in Spring - July 14th, 2026 In two short months, on this date in September, Java 27 will be here! Who's excited? I'm excited! I'm in delightful Denver, CO, for the amazing UberConf. I just delivered a workshop that was scheduled from 09:00 to 17:00, but it went into overtime, and we jus...
CVE-2026-15128 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-15127 vulnerabilities
Vulnerabilities for packages: chromium...