MAL-2026-14347 Malicious code in mcq-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102706 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

GHSA-VMR9-J6WF-PMH2 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

The netty-incubator-codec-ohttp library implements Oblivious HTTP OHTTP gateway and client functionality using Netty's ByteBuf memory management. When an OHTTP gateway processes encrypted client requests, it allocates a pooled direct native off-heap ByteBuf to hold the decrypted plaintext before...

PCAPdroid v2.0.0

PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...

CVE-2026-4937

IBM PowerVM Hypervisor (FW1110.00–FW1110.20, FW1060.00–FW1060.71, FW950.00–FW950.H2) is vulnerable to insufficient entropy (CWE-331) in certain hypervisor calls, allowing a local attacker with administrative privileges to decrypt encrypted data. The CVSS 3.1 score is 5.3 (Medium) with a local att...

EUVD-2026-62842

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

Malicious code in matrixflow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45393245d9a2fca558d1bcb8b7c9d5263c16ff63e9a038a51169b720c85e1352 [email protected] is a typosquat/repackage of ml-matrix the UMD global is mlMatrix; homepage matrixflow-js.github.io does not correspond to the rea...

Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

MAL-2026-14209 Malicious code in sui-gql-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12074ac469d8426297f5f8bb3dd28fd48424a71348b2c16590fd4b41e4e6ad33 On require, lib/telemetry.js runs a top-level IIFE that reads the installer's /.gitconfig, extracts the configured email addresses and user name,...

MAL-2026-14175 Malicious code in core-js-gns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5eadad92952db436b03dd9673b34d203d9296b0913389de2aa0d9fef441631 The package's postinstall hook package.json → node init.js runs an installer-side dropper. init.js gates on developer-machine heuristics presence of...

PT-2026-78673

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested...

Linux Distros Unpatched Vulnerability : CVE-2026-72490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtwaesdecrypt The null-pointer-guard was incorrect,...

EUVD-2026-61065

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

Malicious code in core-tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bbda0dc4bcf5478f2edd6a243b1f289f2b0471f950b4362f21b5a6344cdd83 Package is advertised as a Tailwind CSS utility but ships no CSS utilities. index.js exports getPlugin which fetches JSON from the hardcoded bare-IP...

MAL-2026-14118 Malicious code in core-tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bbda0dc4bcf5478f2edd6a243b1f289f2b0471f950b4362f21b5a6344cdd83 Package is advertised as a Tailwind CSS utility but ships no CSS utilities. index.js exports getPlugin which fetches JSON from the hardcoded bare-IP...

Improper Verification of Cryptographic Signature

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

SUSE CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

CVE-2026-72490

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. An incorrect null-pointer guard in the rtwaesdecrypt function could lead to the system misinterpreting memory addresses. This issue may result in a system crash, causing a Denial of Service DoS. Mitigation Mitigation for this issue is...

PYSEC-2026-3773

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

CVE-2026-74900

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...