103 matches found
PT-2026-128266
SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcp api.cpp loop over the JSON sockets array uses slot data"sockets".Size without bounding gem idx by MAX GEM SLOTS, which is four in...
Astra Linux – Vulnerability in golang-golang-x-text
In golang.org/x/text, the text/language field before version 0.3.7 can cause a panic due to an out-of-bounds read during BCP 47 language tag parsing. Index calculations are also handled incorrectly. If untrusted user input is parsed, this could be exploited as a vector for a denial-of-service...
Malicious code in bcp-security-update (npm)
Source: amazon-inspector c9d8a18510bbeb71543526f0ef059351a12f97a1addd3c8664961231a7e862bf The package bcp-security-update was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in bcp-security-updates (npm)
Source: amazon-inspector 0ae78f7be7d7bfc2a5c001fd71b000a7cfe42a5f8c6e7d2b828ec3f143d26319 The package bcp-security-updates was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2026-69301
A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...
PT-2026-84296
A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...
Malicious code in bcp-security-updates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae78f7be7d7bfc2a5c001fd71b000a7cfe42a5f8c6e7d2b828ec3f143d26319 The package bcp-security-updates was found to contain malicious code...
Malicious code in bcp-security-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d8a18510bbeb71543526f0ef059351a12f97a1addd3c8664961231a7e862bf The package bcp-security-update was found to contain malicious code...
MAL-2026-1659 Malicious code in bcp-security-updates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae78f7be7d7bfc2a5c001fd71b000a7cfe42a5f8c6e7d2b828ec3f143d26319 The package bcp-security-updates was found to contain malicious code...
MAL-2026-1658 Malicious code in bcp-security-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d8a18510bbeb71543526f0ef059351a12f97a1addd3c8664961231a7e862bf The package bcp-security-update was found to contain malicious code...
Malware in bcp-security-package-update
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in bcp-security-package-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab9e582af309b4d91c05179b0b3a9d0532e26d3c7c34b1d80d0b1ad826d71c4 The package bcp-security-package-update was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49280 Malicious code in bcp-security-package-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab9e582af309b4d91c05179b0b3a9d0532e26d3c7c34b1d80d0b1ad826d71c4 The package bcp-security-package-update was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-37284
Malicious code in bcp-security-package-update npm...
EUVD-2021-27362
Malware in sbrugna...
EUVD-2020-21244
Malware in sbrugna...
EUVD-2022-7707
Malicious code in bioql PyPI...
EUVD-2021-31472
Malicious code in bioql PyPI...
CVE-2021-44652
Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component...
CLSA-2025-1742923385 ghostscript: Fix of CVE-2023-28879
CVE-2023-28879: Fix buffer overflow in base/sbcp.c by correctly handling write buffer for BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode functions...