Prototype Pollution

Overview @alifd/next is an A configurable component library for web built on React. Affected versions of this package are vulnerable to Prototype Pollution due to the ConfigProvider.getContextProps function in components/dialog/index.tsx. An attacker can modify object prototype attributes by...

MINI-632J-445R-8QX2

Bulletin has no description...

MINI-5C43-RWHW-P77J

Bulletin has no description...

MINI-CMC6-RG78-HFQH

Bulletin has no description...

Exploit for CVE-2026-8206

CVE-2026-8206 Vulnerability: Unauthenticated Account Takeo...

UBUNTU-CVE-2026-16369

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

UBUNTU-CVE-2026-16400

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

Malicious code in @driivz/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7067 Malicious code in @driivz/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-14400

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-54756 via jodit (>=4.0.18, <=4.3.2)

jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-54756 Source advisory: SNYK:JS-JODIT-17796054...

@agdo/object-model (>=1.0.1, <=1.2.34), @agilie/widget-template (>=1.0.2, <=1.1.6) +415 more potentially affected by CVE-2026-50557 via @angular/core (>=18.0.0, <=18.2.14)

@angular/core NPM version =18.0.0, =1.0.1, =1.0.2, =0.0.0, =1.0.0, =0.0.55, =1.0.0, =18.2.0, =7.0.0, =7.0.3 - @auscope/angular2parse 18.0.0 and more Source cves: CVE-2026-50557 Source advisory: OSV:GHSA-F3M7-GQXR-G87X...

MAL-2026-3003 Malicious code in @amsterdam-local/forms-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b91d9d855e239db33d7709fe9a88228eee0a166ce7312b5fb7f55f57dc488 The package @amsterdam-local/forms-component-library was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @usealloy/component-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @usealloy/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f32d74c27a8086c59f766c74f3fd9165eb49c0aa829661b6ff00e982c84d510 The package @usealloy/component-library was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2970 Malicious code in @usealloy/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f32d74c27a8086c59f766c74f3fd9165eb49c0aa829661b6ff00e982c84d510 The package @usealloy/component-library was found to contain malicious code. Source: ghsa-malware...

Malicious code in @veygo/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e933eb47618798a0095c7459f32af061415b1c38283dae151ae916e4cb5e4bce The package @veygo/component-library was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2680 Malicious code in @veygo/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e933eb47618798a0095c7459f32af061415b1c38283dae151ae916e4cb5e4bce The package @veygo/component-library was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in zero-develop-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25ede928413a72b6cfc25c807bc6f5902bd1b9d00f1d3d83624e237da613fb1 The package zero-develop-component-library was found to contain malicious code...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +40 more potentially affected by CVE-2026-32635 via @angular/core (>=19.0.0, <=19.2.19)

@angular/core NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-32635 Source advisory:...