CVE-2026-15415

The CVE-2026-15415 entry concerns the AWS HealthOmics MCP Server (aws-healthomics-mcp-server) before version 0.0.36. The vulnerability is a path traversal in the linting tools that can let an actor who can influence the MCP agent write actor-controlled content to arbitrary locations outside the i...

CVE-2026-44786 Discourse: Public chat MessageBus broadcasts are not restricted to chat-eligible users

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, chat events for public category channels are published to MessageBus without permission scoping, so any MessageBus...

Converge Connect: Unlock Lower Premiums with Proven Qualys Security

Key Takeaways Qualys, in collaboration with Converge, has launched an offering that ties your security posture to your cyber insurance costs. The Qualys Converge Connect Insurance Report CCIR supplements manual insurance questionnaires with objective, platform-generated, real-time security data...

EUVD-2025-99305

Malicious code in eligibledormousez3n npm...

EUVD-2025-99299

Malicious code in eligiblezebraz3n npm...

EUVD-2025-92251

Malicious code in eligiblemothz3n npm...

EUVD-2025-74701

Malicious code in eligibledragonscarlet-8 npm...

EUVD-2025-74702

Malicious code in eligiblecardinalblack-65 npm...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76988

Malicious code in eligiblestingray-appteadev npm...

EUVD-2025-76989

Malicious code in eligiblesparrow-appteadev npm...

EUVD-2025-86287

Malicious code in eligibleminnowz3n npm...

Malicious code in eligible-peach-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2207b76ef8202f76519a64a2b9607143566156afb8c447abf9ef797981025db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54647

Malicious code in eligible-jade-porpoise npm...

EUVD-2025-54650

Malicious code in eligible-amethyst-unicorn npm...

EUVD-2025-54648

Malicious code in eligible-emerald-wildebeest npm...

EUVD-2025-54649

Malicious code in eligible-bronze-quokka npm...

EUVD-2025-54646

Malicious code in eligible-peach-kiwi npm...

EUVD-2025-54645

Malicious code in eligible-peach-swan npm...

MAL-2025-68004 Malicious code in eligible-peach-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2207b76ef8202f76519a64a2b9607143566156afb8c447abf9ef797981025db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...