1711 matches found
org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.4.0, <=3.4.2) potentially affected by CVE-2026-71899 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.4.0, <=3.4.2)
org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.4.0, =3.4.0, =3.4.2 Source cves: CVE-2026-71899 Source advisory: MEND:CVE-2026-71899...
org.apache.dolphinscheduler:dolphinscheduler-alert-server (>=3.4.0, <=3.4.2), org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.4.0, <=3.4.2) potentially affected by CVE-2026-78214 via org.apache.dolphinscheduler:dolphinscheduler-actuator-authentication (>=3.4.0, <=3.4.2)
org.apache.dolphinscheduler:dolphinscheduler-actuator-authentication MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.2 Source cves: CVE-2026-78214 Source advisory: MEND:CVE-2026-78214...
com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0, <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-dist (>=2.0.0-alpha, <=3.4.2) +2 more potentially affected by CVE-2026-81569 via org.apache.dolphinscheduler:dolphinscheduler-api (>=1.3.9, <=3.4.2)
org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =1.3.9, =1.1.0, =2.0.0-alpha, =2.0.2, =1.3.9, =3.0.6 Source cves: CVE-2026-81569 Source advisory: MEND:CVE-2026-81569...
org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2, <=3.4.2) potentially affected by CVE-2026-66083 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.3.2, <=3.4.2)
org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.3.2, =3.3.2, =3.4.2 Source cves: CVE-2026-66083 Source advisory: MEND:CVE-2026-66083...
Malicious code in dotenv-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4369c7fa886fc7d315922759932056664863d71157bcdece943fa53339586f03 Package dotenv-native typosquats the popular dotenv family bundled internal manifest name node-env-buffer and executes an attacker-controlled payload...
CVE-2026-54160
The Network UPS Tools (NUT) software contains a vulnerability in its GitHub Actions script used for the make-dist workflow. Due to a misconfiguration that mixed privileged code (a write-scoped GITHUB_TOKEN ) with untrusted inputs from PR source branches, a malicious pull request from a fork could...
CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
CVE-2026-101079
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
CVE-2026-101079
The agentverus agentverus-scanner (up to version 0.8.1 ) contains a vulnerability in the isSecurityDefenseSkill function located in dist/scanner/analyzers/context.js . The root cause is the reliance on untrusted inputs during a security decision. Exploitation requires a local position to initiate...
CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
EUVD-2026-88336
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...
MAL-2026-17178 Malicious code in secure-env3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb86188f9853b34c6dc3cf9c8259a789920326e8ddf4ae4cd3566385bba3ea1 The package presents itself as a dotenv-style environment loader but ships a Windows dropper that fires automatically on module load and on CLI...
Malicious code in better-dotenv3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f996c75c75423a57a64c1c89b04f2e1ba87674973dba2dd359df5b0937ffe3cf The package is a dotenv typosquat that runs a hidden Windows loader on every require and on CLI startup. dist/index.cjs and dist/cli.cjs invoke...
ROOT-APP-NPM-AIKIDO-2026-169371 AIKIDO-2026-169371 in pdfjs-dist - Patched by Root
Root has patched AIKIDO-2026-169371 in the pdfjs-dist package for Root:npm. Multiple fixed versions available...
