MAL-2026-453 Malicious code in @fortinet/fortigate-autoscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6100c8f444b32630601fbeee65c6af9df19979345ea5dc04740f40356c188e06 The package @fortinet/fortigate-autoscale was found to contain malicious code. Source: ghsa-malware...

MAL-2026-455 Malicious code in @mailpoet/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec1e0266ccd0888d11f208447e31b521c1d6a2d7e622b0b78d7572b5f6e8b3e The package @mailpoet/components was found to contain malicious code. Source: ghsa-malware...

VulnCheck KEV: CVE-2025-8829

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function umred of the file /goform/RPsetBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45029)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45029 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21681)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21681 advisory. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21776)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21776 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38336)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38336 advisory. - In the Linux kernel, the following vulnerability has been resolved: ata: patavia: Force PIO for ATAPI device...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38043)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38043 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Set dmamask for ffa...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38422)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38422 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38182)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38182 advisory. - In the Linux kernel, the following vulnerability has been resolved: ublk: santizize the arguments from...

CVE-2026-20045

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

Malicious code in tv-admin-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c0b8199883c9cf5ea055f98b5f90f8cfb349eceba1b6c4026ef3b94c96872b The package tv-admin-commons was found to contain malicious code. Source: ghsa-malware 0b766afca3bfb069abd800cf6cb59759fc8555cdeb01e8d8e0576d5adaf720...

Malicious code in ts-tweetnacl-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8035e1fe9ea296c85e726e0afad93eacff3199c25542e19153f914cc63251c12 The package ts-tweetnacl-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in oce-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b843dd5f2dd468eea116bc6b01258c72903738ea423def44e73bbee3e0a477f The package oce-icons was found to contain malicious code. Source: ghsa-malware e946a5aefa4f4734044a2667883bff32c43c93401630708063066e1348fb2b25 Any...

MAL-2026-390 Malicious code in internallib_v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c291455afc990d6ae2ac49fa20ae7607e6da1a60e5d2ab5d745cfb065c6ca6c8 The package internallibv325 was found to contain malicious code. Source: ghsa-malware d5dedf497ea370ca0df69bffd7fd034f3df7e6dfd866e69f3ace19487df89c1...

MAL-2026-387 Malicious code in chai-dex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3981723ad48f842f54ac0b50b2d0002851c9aa3843894eb2b3032c5e9e49ce The package chai-dex was found to contain malicious code. Source: ghsa-malware 553083422e15551842621151db7ca73578cf9dcc235c0bec2fab4493009bea34 Any...

MAL-2026-384 Malicious code in @mikudev/signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dddb766a44047fdc14156a60478172f91323f76100b8fc519f26d26397a2a915 The package @mikudev/signal was found to contain malicious code. Source: ghsa-malware f71f53e3538af5a0731e164d819b83390317e35e73a710f46338da15f2c82b4...

MAL-2026-399 Malicious code in torbaileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e4b08c935365c992a67e45fd75888de1262836188ca5a0246ba4bae988b713 The package torbaileys was found to contain malicious code. Source: ghsa-malware 477238eba8ca0f2c24ebb88b73089608a73fdc363b248e404b66acc829c0777d Any...

MAL-2026-398 Malicious code in tor-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3281075aed24ae2af07fd17a56499318dcd8cd0fa836f60e1fa76814b90c2742 The package tor-libsignal was found to contain malicious code. Source: ghsa-malware 25164e8116dd5f0b085529d972fb628013ac35df2065ee934693a23bd13da788...

MAL-2026-389 Malicious code in genki-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e636da349bfd5c22a704e2651968ebd55878349304e3f3d69904853a440aa407 The package genki-analytics was found to contain malicious code. Source: ghsa-malware 791197b134fc48f105a6db2a597a13ea389bd70b75daa689a891a96ba1d251e...