Lucene search
+L

8342 matches found

Chainguard
Chainguard
added 2026/08/10 8:30 p.m.10 views

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...

6.1CVSS6.2AI score0.00206EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/10 8:19 p.m.27 views

CVE-2026-73035 npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences

npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...

5.3CVSS0.00214EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 8:19 p.m.24 views

CVE-2026-73035 npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences

npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...

5.3CVSS5.5AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/10 8:19 p.m.13 views

EUVD-2026-55804

npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or repository URL fields. When a developer runs ncu with the --form...

5.3CVSS5.4AI score0.00214EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2026/08/10 5:29 p.m.14 views

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It ...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/08/10 2:4 p.m.6 views

CLSA-2026-1786370674 TuxCare security update for undici (2 CVEs)

TuxCare rebuilt undici to address 2 CVEs. Fixed in 5.29.0-tuxcare.5...

3.7CVSS6AI score0.00238EPSS
SaveExploits0
OSV
OSV
added 2026/08/10 1:21 p.m.5 views

MINI-G6CH-2MP5-6228

Bulletin has no description...

7.2CVSS7AI score0.00368EPSS
SaveExploits0
OSV
OSV
added 2026/08/10 1:20 p.m.5 views

UBUNTU-CVE-2026-68281

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

5.4AI score0.00175EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/10 1:20 p.m.6 views

UBUNTU-CVE-2026-68347

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: 259.410489 ===================================================== 259.417287 WARNING: HARDIRQ-safe - HARDIRQ-unsafe lock order detected 259.424667...

5.2AI score0.00162EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/10 12:2 p.m.32 views

CVE-2026-68281

The CVE-2026-68281 entry covers the Linux kernel DRM/imagination driver where the DRM scheduler’s prepare_job() previously failed to account for the dependency between paired geometry and fragment jobs. The fix updates job_count_remaining_native_deps() so that paired job fences are counted as dep...

5.4AI score0.00175EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/10 12:2 p.m.34 views

CVE-2026-68281 drm/imagination: Count paired job fence as dependency in prepare_job()

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

0.00175EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/10 12:2 p.m.8 views

EUVD-2026-55382

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

5.4AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 12:2 p.m.13 views

CVE-2026-68281 drm/imagination: Count paired job fence as dependency in prepare_job()

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

5.5AI score
SaveExploits0References7
OSV
OSV
added 2026/08/10 10:55 a.m.5 views

OPENSUSE-SU-2026:21557-1 Security update for gleam

This update for gleam fixes the following issues: Changes in gleam: - Update to 1.18.1: CVE-2026-59247: insufficient verification of data authenticity allows a MITM adversary to substitute forged Hex package contents during dependency resolution bsc1272992 Set minimum required Erlang version to 2...

7.6CVSS5.4AI score0.0013EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/09 1:9 p.m.17 views

Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

5.3AI score
SaveExploits0References2
OSV
OSV
added 2026/08/09 1:9 p.m.12 views

MAL-2026-13666 Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

5.4AI score
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/07 6:48 p.m.9 views

NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain vulnerability discovered by ? in WordPress Npm crypto-js versions 4.0.0...

9CVSS5.2AI score0.00317EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2026/08/07 6:36 p.m.5 views

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +414 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.17.0, =0.6.0, =0.8.0, =0.5.3, =0.17.0, =0.1.4, =0.0.13, =0.1.5 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

5.3CVSS6.4AI score0.00291EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/07 6:36 p.m.5 views

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +414 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0-dev.2580522, =0.1.0, =0.3.1, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.17.0, =0.6.0, =0.8.0, =0.5.3, =0.17.0, =0.1.4, =0.0.13, =0.1.5 and more Source cves: CVE-2026-71848 Source advisory: OSV:GHSA-54FX-42GC-7VW4...

5.3CVSS6.4AI score0.00291EPSS
SaveExploits0
OSV
OSV
added 2026/08/07 2:35 p.m.14 views

MAL-2026-13613 Malicious code in big-tss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022f32d17f1b3fa4c33727aa2309fe4e75706c842ac04b25a48738fdb9aa3d2b [email protected] impersonates the popular big.js arbitrary-precision math library and ships upstream big.js source with an injected block at the top of...

5.7AI score
SaveExploits0References2
Rows per page
Query Builder