Malicious Package

Overview cloud-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. IBM WebSphere Application Server Liberty is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak...

Security Bulletin: Due to use of Apache Http Server, IBM Cloud Pak System is affected by HTTP Response splitting [CVE-2024-24795]

Summary HTTP Response splitting vulnerability has been identified in Apache HTTP Server. This vulnerability was addressed by IBM Cloud Pak System 2.3.6.2 Vulnerability Details CVEID:CVE-2024-24795 DESCRIPTION: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker th...

CVE-2026-107839

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

CVE-2026-107839 ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

EUVD-2026-95934

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

Malicious code in @galicia-toolkit-nestjs/commons (npm)

Source: amazon-inspector eae27acb3901d275439e482d51a1451df67c1a6b2011f35881253a3fa8d2456b The package ships a tiny index.js that requires a bundled ELF at prebuilds/linux-x64/metrics.node inside a swallow-all try/catch on module load. No C/C++ source, binding.gyp, or node-gyp/prebuild tooling is...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, kubedock, crossplane-provider-aws-cur-fips, crossplane-provider-aws-apigateway, crossplane-provider-aws-servicecatalog, longhorn-engine-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, falcosidekick-ui, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, grafana-prometheus-datasource, terraform-mcp-server, kubedock, crossplane-provider-aws-cur-fips, hydra-fips, crossplane-provider-aws-apigateway,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, zarf, runc, crossplane-provider-azure-sql, opa, nova, jitsucom-bulker, vertical-pod-autoscaler, pulumi-language-yaml, azuredisk-csi, portieris,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, zarf, runc, crossplane-provider-azure-sql, opa, nova, jitsucom-bulker, vertical-pod-autoscaler, pulumi-language-yaml, azuredisk-csi, portieris, crossplane-provider-aws-lambda,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, zarf, runc, crossplane-provider-azure-sql, opa, nova, jitsucom-bulker, vertical-pod-autoscaler, pulumi-language-yaml, azuredisk-csi, portieris,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, zarf, runc, crossplane-provider-azure-sql, nova, vertical-pod-autoscaler, azuredisk-csi, portieris, crossplane-provider-aws-lambda, crossplane-provider-aws-cloudformation, eksctl,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, zarf, runc, crossplane-provider-azure-sql, opa, nova, jitsucom-bulker, vertical-pod-autoscaler, pulumi-language-yaml, azuredisk-csi, portieris,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, node-feature-discovery, pulumi-kubernetes-operator, git-lfs, opentofu, nri-haproxy, zarf, runc, crossplane-provider-azure-sql, opa, nova, jitsucom-bulker, vertical-pod-autoscaler, pulumi-language-yaml, azuredisk-csi, portieris,...