acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107293 via pydantic-ai (>=2.0.0b1, <=2.27.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107293 Source advisory: GHSA-3GH4-CGHQ-F8V4...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107293 via pydantic-ai (>=2.0.0b1, <=2.27.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107293 Source advisory: SNYK:PYTHON-PYDANTICAI-20583871...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: GHSA-V2XH-2VP8-57H8...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: OSV:GHSA-V2XH-2VP8-57H8...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

JLFSink

JLFSink Designed by jakelo.ai · Coded with AI assistanc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix the issue where the nvmemdeviceput function was not called, leading to a reference leak. In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained through nvmemdevicefind was no...

Malicious Package

Overview alexa-cybertron-team-code-review-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious code in alexa-cybertron-team-code-review-agent (npm)

alexa-cybertron-team-code-review-agent is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the...

MAL-2026-17430 Malicious code in alexa-cybertron-team-code-review-agent (npm)

alexa-cybertron-team-code-review-agent is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the...

Karma Pro 0.12

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

EUVD-2026-86477

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

EUVD-2026-86478

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

EUVD-2026-86476

Incorrect Authorization CWE-863 in project name normalization ProjectUtil.stripGitSuffix and ProjectCache eviction logic ProjectCacheImpl in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an authenticated user or an unauthenticated user ...

CVE-2026-87720

Incorrect Authorization CWE-863 in project name normalization ProjectUtil.stripGitSuffix and ProjectCache eviction logic ProjectCacheImpl in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an authenticated user or an unauthenticated user ...

CVE-2026-87722

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

CVE-2026-87721

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87722

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

CVE-2026-87722 Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

CVE-2026-87722

Gerrit Code Review versions 2.1.6 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-1333). The root cause is the compilation of user-supplied regular expressions into unbounded dk.brics.automaton instances on the re...