MAL-2026-14861 Malicious code in 3layerdipstackoms1fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97713fb02abd28ed8ae39bdff7b71df1f21f6e8f835baf5f074bbe05984808 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackihi1o9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a901824681511a2e113ac8f970984a35b6e042d971695d8933f0a44f58442 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14749 Malicious code in 3layerdipstackfdgka0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b1e8e507446d2e1921511d47721fa25899b90432339713bbaac218908d68b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14602 Malicious code in 3layerdipstack1g5cxo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed95dd89d1a5daf491b1350b3cd65fb73e19a50ef66848b5a86ffdba77ba6205 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14696 Malicious code in 3layerdipstackbn5wu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aca41cf6e277e50dc007b6df90e08c1fe49706a46fcd3c185208d99f76aac1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14669 Malicious code in 3layerdipstack8zg7y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d67b18e31be3701ce965612c851f62d385f0f0d5c6326464fb76cea70d6875e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14598 Malicious code in 3layerdipstack1a4xg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5757d0297f898182175bc3d1a4ce7dc9d0161b4e24031c3442f25e565b6dfebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14944 Malicious code in 3layerdipstackuew4bh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f693f3775d167495f7080e39f299df6fb4cc1e282f79718d712fcca91076e82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15197 Malicious code in desmos-graphing-3sp71tdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d246b8871e487d793e8a7837c78bb17b343b500110923a68fb1aacc2433c58a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15254 Malicious code in desmos-graphing-y1aqhk2u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27491976b2ff276299d5598a5eefe3f725a5683d23821ea6a088e53fad425663 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-rsq09wdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcad758e91e7fc846d0fb842f490c66da75b8a99c4f4867ce6024ccffdf987f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15074 Malicious code in classlink-fp7poyii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe762ef1011dea9f34d900f617d2e8badc973b6128b6b6e3cf6dcc69948dcdc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15150 Malicious code in classlink-u1vqpl5z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9599710c848a74113f06cd897bee6caed418286f4cab58e3b3c5772782d3a7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-rkt8e6l7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b288624e813a5b3692a59c632af15afff1ac6ef343f446ee64222795d24940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15434 Malicious code in secure-test-browser-ude9srx4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4160d2b21a64b999a264511a0f6a9329aaf809e2902a15e912cddb9e3a962f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15183 Malicious code in classlink-yo9y3rsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f57b285c68a12fe4c8abd89d685c5b26f4fc933e56d8e4a0c643ec7969110ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-83371

Name of the Vulnerable Software and Affected Versions mapfish-print versions prior to 3.28.30 mapfish-print versions prior to 3.30.32 mapfish-print versions prior to 3.31.24 mapfish-print versions prior to 3.33.16 mapfish-print versions prior to 4.0.5 Description MapFish Print fails to disable...

CVE-2026-55848: Improper Restriction of XML External Entity Reference

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2026-55425: Exposure of Sensitive Information Due to Incompatible Policies

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

PT-2026-83241

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...