Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. A crafted PDB LFDECIMAL payload can trigger an out-of-bounds stack write when processed by DIA...

CVE-2026-114151

A crafted PDB LFDECIMAL payload can trigger an out-of-bounds stack write when processed by DIA...

[SECURITY] Fedora 45 Update: dia-0.97.3-34.fc45

The Dia drawing program can be used to draw different types of diagrams, and includes support for UML static structure diagrams class diagrams, entity relationship modeling, and network diagrams. Dia can load and save diagrams to a custom XML format and export diagrams to formats like EPS, SVG,...

Malicious code in dia-9 (npm)

Source: amazon-inspector 8cb6a0dc98ae86918a59e3c4263041262d0319faa888033a7499b53f5afb5ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-8 (npm)

Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-31 (npm)

Source: amazon-inspector ea962b43524f0de179038c7597dec087561ff7b20781b425a5a49ca84452cce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-40 (npm)

Source: amazon-inspector f254a575513a77bb55b16b9b41f12314bd4f2b385393eb27c8b7ccca7be1b044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-12 (npm)

Source: amazon-inspector 1efde767aa3c14092fdf78faeb865e5e6a2f1184aa5ba0b5338e80cc2411fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-36 (npm)

Source: amazon-inspector 372e77d612b0ec10fc69dbedfa115457bc9243f66a9d6110a642dde48fefe332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-22 (npm)

Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-25 (npm)

Source: amazon-inspector 90bc1fe72ba9b9d126f321d563f262f0c1bee138fa6c494371db6729f5c9a938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-23 (npm)

Source: amazon-inspector ee0a96f016357b1e560c4cfb0b9b324793556c1d1e4bc1e308d7c5c0208de129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-10 (npm)

Source: amazon-inspector 42372fdb54c843b791f7713f6c8f2370821d4b643852c7c179fbc3fa1d64015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-46 (npm)

Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-48 (npm)

Source: amazon-inspector b135a60d795b28d289dbaa7aa9784382e965bea841d7c65659d67dc281ee470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-38 (npm)

Source: amazon-inspector bf9792a3a451d3e3be12f7c50a24ae8c379bf440ef5704968a13c0eeb9c63c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-30 (npm)

Source: amazon-inspector eff1123100fa9c082f85bb48c95034eae67ab9c27c43f4cc1ca2b4f3abcb0525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-42 (npm)

Source: amazon-inspector fc5a43cc74e795558d9168f261897e8d4b4f19dec5fca2d6a5d31f4124633904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-4 (npm)

Source: amazon-inspector d21d45ea747947cef40b5ef0515d23e7592d6a8c4031f343a00256f03e490b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-3 (npm)

Source: amazon-inspector d9047fa3f1f57a757043f255509ec4815e2540690175c3fc7cf3fa627f935154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...