CVE-2026-9917

An uninitialized use flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500095304...

perl-XML-Parser security update

2.47-6.1.0.1 - Add perlLWP Requires 2.47-6.1 - Fix CVE-2006-10002, CVE-2006-10003...

UBUNTU-CVE-2026-34520

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...

[SECURITY] Fedora 42 Update: mingw-libsoup-2.74.3-17.fc42

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

MAL-2026-173 Malicious code in cng-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...

perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

A flaw was found in Perl's CPAN, which doesn't check TLS certificates when downloading content. This happens due to verifySSL missing when suing the HTTP::Tiny library during the connection. This may allow an attacker to inject into the network path and perform a Man-In-The-Middle attack, causing...

CVE-2025-68387

Improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting XSS CAPEC-63 via a vulnerability a function handler in the Vega AST...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Malicious code in mp3-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e9d2f7a789653ac711126e4d4e9772e8f26c9bb97b19b51d2f2880bf74d2b4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33604

Malicious code in mp3-web-lib npm...

MAL-2025-48285 Malicious code in mp3-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e9d2f7a789653ac711126e4d4e9772e8f26c9bb97b19b51d2f2880bf74d2b4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2007-5600

Malware in sbrugna...

EUVD-2024-3031

Malicious code in bioql PyPI...

CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

CLSA-2025-1758193800 php: Fix of CVE-2020-7067

CVE-2020-7067: fix negative indexing in phpurldecode function...

CVE-2025-57702

DIAEnergie - Reflected Cross-site Scripting...

Malicious code in jimdo-web-library (npm)

The package jimdo-web-library was found to contain malicious code...

Malicious code in test-web-library-build (npm)

The package test-web-library-build was found to contain malicious code...

MAL-2025-23807 Malicious code in jimdo-web-library (npm)

The package jimdo-web-library was found to contain malicious code...