salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

ROOT-APP-NPM-CVE-2021-4435 CVE-2021-4435 in yarn - Patched by Root

Root has patched CVE-2021-4435 in the yarn package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-8131 CVE-2020-8131 in yarn - Patched by Root

Root has patched CVE-2020-8131 in the yarn package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10773 CVE-2019-10773 in yarn - Patched by Root

Root has patched CVE-2019-10773 in the yarn package for Root:npm. Multiple fixed versions available...

Hadoop-YARN-RCE

Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...

CVE-2021-24901

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:56+00:00| seen| https://t.me/hackingAttack/42050 2026-09-02 01:02:17+00:00| seen| https://t.me/hackingAttack/42050 2026-09-06 10:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/42050 2026-09-07 01:00:24+00:00|...

CLSA-2026-1786471987 TuxCare security update for yarn (3 CVEs)

TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...

CLSA-2026-1786471978 TuxCare security update for yarn (1 CVE)

TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...

PT-2026-80085

TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...

PT-2026-80086

TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...

CLSA-2026-1786378841 TuxCare security update for yarn (5 CVEs)

TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...

PT-2026-80047

TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...

Yarn Lock File Disclosure Detection

The yarn.lock file stores the versions of each Yarn dependency installed. It's a lock file for package.json. !/usr/bin/env python3 -- coding: utf-8 -- """The yarn.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Yarn...

Apache Hadoop YARN ResourceManager - Remote Code Execution Detection

Apache Hadoop YARN ResourceManager is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Apache...

Malicious Package

Overview test-pkg-yarn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

openslides (>=2.3.0b1, <=2.3.0), pex (>=1.4.6, <=1.5.3) +4 more potentially affected by CVE-2026-59890 via setuptools (40.9.0)

setuptools PYPI version 40.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.3.0b1, =1.4.6, =0.2.0, =0.2.2, =0.1.0, =0.2.3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2023-25664 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2023-25664 Source advisory: OSV:PYSEC-2026-3122...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2023-25663 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2023-25663 Source advisory: OSV:PYSEC-2026-3116...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2023-25665 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2023-25665 Source advisory: OSV:PYSEC-2026-3106...