CVE-2026-21006

CVE-2026-21006 describes an improper access control in Samsung DeX (before SMR Apr-2026 Release 1) that lets a physical attacker access hidden notification contents. The entry specifies affected platform as Samsung DeX, with a minimal base impact on confidentiality (VULNERABLE: LOW; SUBSEQUENT: H...

PT-2026-32264

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

Embedded Malicious Code

Overview @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a...

MAL-2026-2510 Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

Malicious code in @velora-dex/sdk (npm)

Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server 89.36.224.5 targeting macOS --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a732dd2745098176d2c19fe3edb359db6f6690b5d14b8d49e8a00b61325311 The packa...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: rancher-agent, omni, gotrue, commercial-grafana, dex-fips, omni-fips, neuvector, teleport, zitadel, neuvector-fips, rancher, mattermost-fips, mattermost, teleport-operator-fips, gotrue-fips, dex...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: dex, rancher-agent, rancher, teleport, mattermost...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: dex, rancher-agent, rancher, teleport, mattermost...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: rancher-agent, omni, gotrue, commercial-grafana, dex-fips, omni-fips, neuvector, teleport, zitadel, neuvector-fips, rancher, mattermost-fips, mattermost, teleport-operator-fips, gotrue-fips, dex...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, argo-rollouts, runc, aws-load-balancer-controller, prometheus, crossplane-provider-aws-memorydb, pulumi-language-dotnet, cert-manager-cmctl, k8sgpt, spqr, libnvidia-container, falco-no-driver, promxy, rancher-machine, tflint, buildah,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, argo-rollouts, runc, aws-load-balancer-controller, prometheus, crossplane-provider-aws-memorydb, pulumi-language-dotnet, cert-manager-cmctl, k8sgpt, spqr, libnvidia-container, falco-no-driver, promxy, rancher-machine, tflint, buildah,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, libnvidia-container, victoriametrics-operator, azuredisk-csi, kube-arangodb, stern, kubernetes-csi-external-health-monitor, dex, rancher-security-scan, pulumi, terraform-provider-time,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, libnvidia-container, victoriametrics-operator, azuredisk-csi, kube-arangodb, stern, kubernetes-csi-external-health-monitor, dex, rancher-security-scan, pulumi, terraform-provider-time,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, libnvidia-container, victoriametrics-operator, azuredisk-csi, kube-arangodb, stern, kubernetes-csi-external-health-monitor, dex, rancher-security-scan, pulumi, terraform-provider-time,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: argo-rollouts, prometheus, pulumi-language-dotnet, opentelemetry-collector, spqr, libnvidia-container, victoriametrics-operator, azuredisk-csi, kube-arangodb, stern, kubernetes-csi-external-health-monitor, dex, rancher-security-scan, pulumi, terraform-provider-time,...

EUVD-2025-208437

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...

CVE-2025-70034

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity 4.19 was discovered in mscdex ssh2 v1.17.0...