8319 matches found
MAL-2026-14068 Malicious code in depcruise-wrap-stream-in-html (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...
Malicious code in fastly-vcl-language-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77be5ce1488e7867223b63fd5c90060e98d6a44325ff2f71bed2b61653d649 The package declares scripts.preinstall = 'node vishu.js', which runs unconditionally on npm install. vishu.js fetches the installer's public IP via...
CVE-2026-74307
The CVE-2026-74307 entry describes a Linux kernel/ext4 vulnerability in EXT4_IOC_MOVE_EXT where donor file superblock validation is done late (inside mext_check_validity after acquiring inode locks), creating a deadlock with sb_writers during cross-filesystem donor use (e.g., overlayfs). The issu...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: cadence-fips, buildkitd, cass-operator-fips, kubo, crossplane-provider-azure-netapp, grafana-pyroscope-fips, crossplane-provider-aws-mediastore, jetstream-controller, kubedock-fips, skaffold-fips, crossplane-provider-aws-monolith, k6-operator-fips, agentbeat-fips,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: cass-operator-fips, kubo, crossplane-provider-aws-monolith, eck-operator-fips, flux-notification-controller-fips, packer-fips, argo-events-fips, mcp-grafana, metrics-agent-fips, crossplane-provider-aws-ram, minio-operator-fips, knative-serving, perses-fips,...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: cadence-fips, buildkitd, cass-operator-fips, kubo, crossplane-provider-azure-netapp, grafana-pyroscope-fips, crossplane-provider-aws-mediastore, kratos, crossplane-provider-aws-monolith, k6-operator-fips, skaffold-fips, agentbeat-fips, eck-operator-fips, xeol,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: kwok, cosign, opensearch-k8s-operator, stakater-reloader, rancher-fleet, pluto, nodetaint, vexctl, terraform-provider-acme, nri-postgresql, nri-kubernetes, kubernetes-csi-external-resizer, kubelet-csr-approver, tfsec, dapr, victoriametrics,...
MINI-V9VP-FVR8-VJ5M
Bulletin has no description...
SUSE CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...
Linux Distros Unpatched Vulnerability : CVE-2026-74307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as t...
CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-54428 vulnerabilities
Vulnerabilities for packages: hadoop-fips, kayenta-fips, airbyte-server, elasticsearch, dependency-track-apiserver, logstash, opensearch, kayenta, airbyte-platform-fips, apicurio-registry-fips, cloudwatch-exporter, thingsboard, opensearch-fips, nuxeo, pinot, geoserver, traccar, conductor, akhq,...
GHSA-V3JC-474W-2WM6 vulnerabilities
Vulnerabilities for packages: hadoop-fips, kayenta-fips, airbyte-server, elasticsearch, dependency-track-apiserver, logstash, opensearch, kayenta, airbyte-platform-fips, apicurio-registry-fips, cloudwatch-exporter, thingsboard, opensearch-fips, nuxeo, pinot, geoserver, traccar, conductor, akhq,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: cass-operator-fips, kubo, crossplane-provider-aws-monolith, eck-operator-fips, flux-notification-controller-fips, packer-fips, argo-events-fips, mcp-grafana, metrics-agent-fips, crossplane-provider-aws-ram, minio-operator-fips, knative-serving, perses-fips,...
CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
MINI-P9C8-MPJ5-57V8
Bulletin has no description...
ROOT-APP-PYPI-CVE-2026-8643 CVE-2026-8643 in pip - Patched by Root
Root has patched CVE-2026-8643 in the pip package for Root:PyPI. Multiple fixed versions available...
MINI-X5JJ-M25F-24C8
Bulletin has no description...