CVE-2026-26514

CVE-2026-26514 affects bird-lg-go prior to commit 6187a4e3afce6d8c29568f8c72ca497d1f5a2b56. The traceroute module parses user input with shlex.Split without validation, enabling an attacker to inject arbitrary flags (e.g., -w, -q) via the q parameter. This can lead to Denial of Service (DoS) by e...

CVE-2026-26514

An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags e.g., -w, -q via the q parameter. This can be exploited to cause a Denial of Service D...

PT-2026-22928

An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags e.g., -w, -q via the q parameter. This can be exploited to cause a Denial of Service D...

CVE-2026-26514

An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags e.g., -w, -q via the q parameter. This can be exploited to cause a Denial of Service D...

CVE-2026-26514

An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags e.g., -w, -q via the q parameter. This can be exploited to cause a Denial of Service D...

[SECURITY] Fedora 42 Update: rpki-client-9.7-1.fc42

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

[SECURITY] Fedora 43 Update: rpki-client-9.7-1.fc43

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

EUVD-2025-117466

Malicious code in cool-black-bird npm...

MAL-2025-136881 Malicious code in secret_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14fcc7b14bd5901bc970a77de8b9502ed2bcfebf97ca47cce0ca95952190b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98070

Malicious code in impossiblebirdz3n npm...

EUVD-2025-100233

Malicious code in convenientbirdz3n npm...

EUVD-2025-100242

Malicious code in continuingbirdz3n npm...

EUVD-2025-95567

Malicious code in puzzledbirdz3n npm...

EUVD-2025-104602

Malicious code in idealbirdz3n npm...

EUVD-2025-89022

Malicious code in rivalbirdz3n npm...

MAL-2025-116862 Malicious code in rival_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6564941aa69a85bdcf4655171728c81631666eb9858e8335434f306cfb629a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6564941aa69a85bdcf4655171728c81631666eb9858e8335434f306cfb629a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100047 Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...