CVE-2026-63037 Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...

MAL-2025-76461 Malicious code in yuni-lapis52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16433ebb805336eef74a4c489f4365a675b03ab0ed8f700b48655dad7244af17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...