CVE-2026-40685

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping...

MAL-2025-174296 Malicious code in goodaan-ngafsa-nuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008ba076dd8d09dd5fb5aad54c5be18ce782b89ea1012914435c1ec9dbc3c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...