CVE-2026-24813: NULL Pointer Dereference

NULL Pointer Dereference vulnerability in abcz316 SKRoot-linuxKernelRoot testRoot/jni/utils modules. This vulnerability is associated with program files cJSON.Cpp. This issue affects SKRoot-linuxKernelRoot...

CVE-2026-24398: Incorrect Regular Expression

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The IPV4REGEX pattern and convertIPv4ToBinary function in src/utils/ipaddr.ts do not properly validate...

@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +135 more potentially affected by CVE-2025-55184 +1 more via @modern-js/utils (>=2.65.2, <=2.70.4)

@modern-js/utils NPM version =2.65.2, =0.0.1, =1.0.0, =1.0.0, =0.44.0, =2.23.0, =0.3.53, =0.0.0-beta.1, =1.0.1, =0.30.0, =0.39.0 and more Source cves: CVE-2025-55184, CVE-2026-23864 Source advisory: SNYK:JS-MODERNJSUTILS-15120607...

EUVD-2026-4183

Malicious code in @ikeacn/utils npm...

Malicious Package

Overview @ikeacn/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-465 Malicious code in @ikeacn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cac48e6bd5a0c800a2b821dafa52f34ae61a0592089305f0f308b264390b0 The package @ikeacn/utils was found to contain malicious code. Source: ghsa-malware 25e3e51050a140b96f55be4f132f695cd77cf380a7a0dea9e48bde3b5064df7c...

Azure Linux 3.0 Security Update: xz (CVE-2025-31115)

The version of xz installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-31115 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to...

Azure Linux 3.0 Security Update: xdg-utils (CVE-2022-4055)

The version of xdg-utils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4055 advisory. - When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to...

Azure Linux 3.0 Security Update: librsvg2 (CVE-2022-23639)

The version of librsvg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23639 advisory. - crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for...

@3w5h/knowledge_query (1.0.30), @3w5h/utils (>=1.0.0, <=1.0.7) +613 more potentially affected by CVE-2026-23965 via sm-crypto (>=0.0.9, <=0.3.14)

sm-crypto NPM version =0.0.9, =1.0.0, =0.1.0, =4.4.42, =0.0.2, =2.2.6, =2.2.6, =2.2.6, =2.3.10, =2.1.4, =2.2.6, =2.2.6, =2.2.6, =2.7.8-alpha.2 - @ancademy/bespoke-group-share 2.5.1 and more Source cves: CVE-2026-23965 Source advisory: OSV:GHSA-HPWG-XG7M-3P6M...

MAL-2026-438 Malicious code in ts-tweetnacl-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8035e1fe9ea296c85e726e0afad93eacff3199c25542e19153f914cc63251c12 The package ts-tweetnacl-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in ts-tweetnacl-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8035e1fe9ea296c85e726e0afad93eacff3199c25542e19153f914cc63251c12 The package ts-tweetnacl-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3710

Malicious code in ts-tweetnacl-utils npm...

Malicious Package

Overview ts-tweetnacl-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in mw-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3e97618076e4e55a66ab4e6db0bd9af5787726d301e9cd90b7884efd085977 The package mw-shared-utils was found to contain malicious code. Source: ghsa-malware fc9d8c69691da9ebbb33986c4ad9eb26e4c1209546e369313ae26ff09cc378c...

EUVD-2026-3500

Malicious code in mw-shared-utils npm...

Malicious Package

Overview mw-shared-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-369 Malicious code in mw-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3e97618076e4e55a66ab4e6db0bd9af5787726d301e9cd90b7884efd085977 The package mw-shared-utils was found to contain malicious code. Source: ghsa-malware fc9d8c69691da9ebbb33986c4ad9eb26e4c1209546e369313ae26ff09cc378c...

CVE-2026-21960: Improper Access Control

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Java utils. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA...

Atlassian Confluence 9.0.1 < 9.2.1 / 9.3.x < 9.4.0 / 9.5.x < 9.5.1 / 10.0.x < 10.0.2 / 10.1.0 / 10.2.0 (CONFSERVER-101573)

The version of Atlassian Confluence Server running on the remote host is affected by a denial of service vulnerability as referenced in the CONFSERVER-101573 advisory. - A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack...