@cotecna/stencil-components (>=3.0.0, <=3.2.1), @sumaris-net/ngx-components (18.5.0-alpha2) +2 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.0.0-nightly-20240307T150431.0, <=6.2.0)

@capacitor/android NPM version =6.0.0-nightly-20240307T150431.0, =3.0.0, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: MEND:CVE-2026-103922...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +3 more potentially affected by CVE-2026-103922 via @capacitor/android (>=7.0.1, <=7.4.4)

@capacitor/android NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-103922 Source advisory: MEND:CVE-2026-103922...

@vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0), @vnejs/bundles.checkers (>=0.2.1, <=0.2.3) +7 more potentially affected by CVE-2026-103922 via @capacitor/android (8.0.2)

@capacitor/android NPM version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/android and may be impacted: - @vnejs/bundles.canvas.react =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves:...

downitall-android (1.5.0), downitall-windows (1.5.0) potentially affected by CVE-2026-92164 via streamlink (7.5.0)

streamlink PYPI version 7.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 Source cves: CVE-2026-92164 Source advisory: OSV:PYSEC-2026-4172...

CLEANSTART-2024-VW81422 Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89

Security vulnerability affects the chromium package. Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89...

CLEANSTART-2024-JL25216 Incorrect security UI in payments in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Incorrect security UI in payments in Google Chrome on Android prior to 91...

CLEANSTART-2024-RR50251 Use after free in WebAuthentication in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Use after free in WebAuthentication in Google Chrome on Android prior to 91...

CLEANSTART-2024-XE83079 Heap buffer overflow in Autofill in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Heap buffer overflow in Autofill in Google Chrome on Android prior to 91...

CLEANSTART-2024-DD50354 Incorrect security UI in Downloads in Google Chrome on Android prior to 92

Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 92...

CLEANSTART-2024-GV44456 Insufficient policy enforcement in Android intents in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in Android intents in Google Chrome prior to 92...

CLEANSTART-2024-OX53318 Incorrect security UI in Navigation in Google Chrome on Android prior to 92

Security vulnerability affects the chromium package. Incorrect security UI in Navigation in Google Chrome on Android prior to 92...

CLEANSTART-2024-PW15902 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98

Security vulnerability affects the chromium package. Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98...

CLEANSTART-2024-DG80618 Incorrect security UI in Downloads in Google Chrome on Android prior to 101

Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 101...

CLEANSTART-2024-WS76335 Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103...

CLEANSTART-2024-NV58280 logic error in the room key sharing functionality of Element Android before 1

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of Element Android before 1...

CVE-2026-103922: Origin Validation Error

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

Linux Distros Unpatched Vulnerability : CVE-2026-100823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. CVE-2026-100823 Note that Nessus relies on the...

CVE-2026-102670: Cleartext Transmission of Sensitive Information

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

PT-2026-103985

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

Linux Distros Unpatched Vulnerability : CVE-2025-26416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of...