@frogbotai/db-d1-sqlite (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105856 via @payloadcms/db-d1-sqlite (>=3.85.1, <=3.88.0)

@payloadcms/db-d1-sqlite NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105856 Source advisory: GHSA-PJ7X-6WPF-PGVP...

Payload: SQL injection in SQLite/Postgres

Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...

@frogbotai/db-d1-sqlite (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105856 +1 more via @payloadcms/db-d1-sqlite (>=3.85.1, <=3.88.0)

@payloadcms/db-d1-sqlite NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105856, CVE-2026-63316 Source advisory: OSV:GHSA-PJ7X-6WPF-PGVP...

@frogbotai/db-d1-sqlite (>=0.0.1, <=0.23.0) potentially affected by CVE-2026-105856 via @payloadcms/db-d1-sqlite (>=3.85.1, <=3.88.0)

@payloadcms/db-d1-sqlite NPM version =3.85.1, =0.0.1, =0.23.0 Source cves: CVE-2026-105856 Source advisory: MEND:CVE-2026-105856...

@payloadcms/db-d1-sqlite (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/db-postgres (>=4.0.0-canary.0, <=4.0.0-canary.33) +2 more potentially affected by CVE-2026-105856 via @payloadcms/drizzle (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/drizzle NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105856 Source advisory: MEND:CVE-2026-105856...

@payloadcms/db-d1-sqlite (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/db-postgres (>=4.0.0-canary.0, <=4.0.0-canary.33) +2 more potentially affected by CVE-2026-105852 via @payloadcms/drizzle (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/drizzle NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105852 Source advisory: SNYK:JS-PAYLOADCMSDRIZZLE-20571386...

Linux Distros Unpatched Vulnerability : CVE-2026-93219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clocksource/drivers/timer-sun4i: Advertise a real minimum delta sun4iclkevtnextevent compensates for the timer stop/start synchronization delay by programming e...

PT-2026-97886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the clocksource/drivers/timer-sun4i driver where the sun4i clkevt next event function incorrectly advertises TIMER SYNC TICKS as the min delta ticks. This allows the...

MAL-2026-6009 Malicious code in @mastra/cloudflare-d1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc557711d8e72038426bf1e85e5225dd60e975b4dc7d3d0be59300abaac844 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/cloudflare-d1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc557711d8e72038426bf1e85e5225dd60e975b4dc7d3d0be59300abaac844 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

EUVD-2015-1572

Malware in sbrugna...

Malicious code in @zalastax/nolb-d1 (npm)

The package @zalastax/nolb-d1 was found to contain malicious code...

MAL-2025-11070 Malicious code in @zalastax/nolb-d1 (npm)

The package @zalastax/nolb-d1 was found to contain malicious code...

Malware in d1-northwind

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in d1-northwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 962330e56ce116749d23c41a6b7723d950582340889862760591e83aa4784e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-28326: Improper Physical Access Control

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2023-45579

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...

CVE-2023-45572

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...

CVE-2023-45576

The CVE-2023-45576 entry describes a Buffer Overflow vulnerability affecting multiple D-Link router models (DI-7003GV2.D1, DI-7100G+V2.D1, DI-7100GV2.D1, DI-7200G+V2.D1, DI-7200GV2.E1, DI-7300G+V2.D1, DI-7400G+V2.D1) with firmware versions listed in the description. The root cause is an issue in ...

CVE-2023-45578

The CVE-2023-45578 entry concerns a buffer overflow vulnerability in several D-Link router models (DI-7003GV2.D1, DI-7100G+V2.D1, DI-7100GV2.D1, DI-7200G+V2.D1, DI-7200GV2.E1, DI-7300G+V2.D1, DI-7400G+V2.D1) where an attacker can remotely trigger arbitrary code execution via the pap_en/chap_en pa...