salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

Hadoop-Yarn-ResourceManager-RCE

취약점 영향 Hadoop yarn ResourceManager에 인가되지 않은 접근 취약점이 있었습니다. 이 취약점은 Hadoop의 핵심 구성 요소인 Hadoop yarn에 존재했습니다. Hadoop yarn은 기본적으로 RPC 서비스를 공개적으로 개방했기 때문에, 원격 공격자가 이 인가되지 않은 취약점을 악용하여 RPC 서비스를 통해 임의의 명령을 실행하고 대상 서버를 제어할 수 있었습니다. 이 취약점은 위험도가 높고 피해가 크며, 상세 정보가 이미 공개되어 공격자에 의해 악용되었으므로, Apache Hadoop을 사용하는 ...

ROOT-APP-NPM-CVE-2019-10773 CVE-2019-10773 in yarn - Patched by Root

Root has patched CVE-2019-10773 in the yarn package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-4435 CVE-2021-4435 in yarn - Patched by Root

Root has patched CVE-2021-4435 in the yarn package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-8131 CVE-2020-8131 in yarn - Patched by Root

Root has patched CVE-2020-8131 in the yarn package for Root:npm. Multiple fixed versions available...

Hadoop-YARN-RCE

Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...

CVE-2021-24901

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:56+00:00| seen| https://t.me/hackingAttack/42050 2026-09-02 01:02:17+00:00| seen| https://t.me/hackingAttack/42050 2026-09-06 10:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/42050 2026-09-07 01:00:24+00:00|...

CLSA-2026-1786471987 TuxCare security update for yarn (3 CVEs)

TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...

CLSA-2026-1786471978 TuxCare security update for yarn (1 CVE)

TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...

PT-2026-80085

TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...

PT-2026-80086

TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...

CLSA-2026-1786378841 TuxCare security update for yarn (5 CVEs)

TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...

PT-2026-80047

TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...

Malicious Package

Overview test-pkg-yarn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-6718 Malicious code in test-pkg-yarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...

GHSA-HJXC-462X-X77J vulnerabilities

Vulnerabilities for packages: yarn...

CVE-2019-15608 vulnerabilities

Vulnerabilities for packages: yarn...

GHSA-MPWJ-FCR6-X34C vulnerabilities

Vulnerabilities for packages: yarn...

CVE-2019-5448 vulnerabilities

Vulnerabilities for packages: yarn...

GHSA-5XF4-F2FQ-F69J vulnerabilities

Vulnerabilities for packages: yarn...