MAL-2026-14053 Malicious code in depcruise-baseline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cc3a6ca908fc8beff657d21068318704e4576cb3778c360036ab5bfef4e56c [email protected] has a name resembling dependency-cruiser/depcruise but ships an empty index.js and declares its sole runtime dependency as ...

MINI-45V7-X5H9-8F7G

Bulletin has no description...

MINI-HMQ7-P4XJ-75C4

Bulletin has no description...

MINI-5PJ8-5FCC-QC2C

Bulletin has no description...

CVE-2026-66456

creationtimestamp| type| source ---|---|--- 2026-08-15 11:03:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt4jl765au27 2026-08-15 11:03:18+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117099187201542367...

MINI-7F4R-5VG2-GGQQ

Bulletin has no description...

MINI-2RH7-5RP4-H3H5

Bulletin has no description...

MINI-2VJ2-5WV7-9C72

Bulletin has no description...

MINI-3JGR-VHHP-F8GF

Bulletin has no description...

CVE-2026-72406

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

UBUNTU-CVE-2026-72245

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

EUVD-2026-59564

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...

EUVD-2026-59383

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

CVE-2026-72484 staging: most: video: avoid double free on video register failure

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

EUVD-2026-59229

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

CVE-2026-72240

The CVE-2026-72240 entry describes a Linux kernel issue in the mfd: sm501 driver where a reference leak occurs when platform_device_register() fails during sm501_register_device(). The embedded struct device in pdev is initialized (via device_initialize()), then proceeds through setup_pdev_dma_ma...

CVE-2026-72005

This CVE concerns the Linux kernel wifi rt2x00 driver. The issue arises in rt2x00lib_probe_dev() which could take a full removal teardown path (rt2x00lib_remove_dev()) for probe failures before critical resources (drv_data, workqueue, intf_work, autowakeup_work, sleep_work) were initialized. The ...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: coredns, tekton-chains, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, pdfcpu, cri-tools, nats, secrets-store-csi-driver-provider-azure, metrics-agent, go-licenses, gh, kubernetes-dashboard-metrics-scraper, vcluster, swagger, kyverno-policy-reporter,...

MINI-6H3C-J996-38W8

Bulletin has no description...

PT-2026-72853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the radeon align pitch function. The issue occurs during the alignment round-up addition and the final calculation of aligned cpp, both of which can overflo...