CVE-2026-55542 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, authenticated users who know a signature filename can obtain a 5-minute signed S3 URL because the S3 branch returns...

CVE-2026-59897

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

Malicious code in rony-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873cd33646b64f2073cc37ed9649a3757fb8aa186d50f700cb8ad199196fd56c The package's main entry index.js collects installer identity data — os.userInfo.username, process.env.INITCWD || process.cwd, and os.hostname — and...

CVE-2026-59897

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

GHSA-RC47-M48R-2657 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53139 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53196 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53132 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53147 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53180 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53177 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53182 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53184 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53186 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53189 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53195 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53202 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53205 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53212 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...

CVE-2026-53216 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-gcp, linux-aws, linux-qemu-melange...