CVE-2026-101963

An Incorrect Calculation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured...

EUVD-2026-101315

An Incorrect Calculation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured...

CVE-2026-102000

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic...

CVE-2026-102011

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

CVE-2026-101999

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message...

EUVD-2026-101331

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

EUVD-2026-101330

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic...

EUVD-2026-101329

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message...

PT-2026-113815

An Incorrect Calculation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured...

PT-2026-113851

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic...

PT-2026-113852

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

CVE-2026-101999: Reachable Assertion

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message...

CVE-2026-101963: Incorrect Calculation

An Incorrect Calculation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured...

CVE-2026-102011: Reachable Assertion

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

CVE-2026-102000: Reachable Assertion

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic...

Malicious code in evo-web (npm)

Source: ossf-package-analysis 1963187cd4dc65fd86ae4bdae898bd2fea39e8e6a8464b3b00e2a83f5dcbb95b The OpenSSF Package Analysis project identified 'evo-web' @ 100.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior...

autotrain-advanced (>=0.6.95, <=0.7.1), dialogy (>=0.10.4, <=2.2.5) +10 more potentially affected by CVE-2026-9856 via transformers (4.38.0)

transformers PYPI version 4.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.95, =0.10.4, =1.7.0, =0.0.1, =0.10.9, =0.1.0, =0.1.17, =0.1.20 - profanity-sanitizer 0.1.4 - team-comm-tools...

Malicious code in additor-elements-evo (npm)

The package additor-elements-evo was found to contain malicious code. --- Credit: OpenSSF source...

Malware in evo-web-base-analytics-data

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in evo-web-base-analytics-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a5ea39e9c916ea6155783b98eeb71551a8a7966edad05852816786e902ac92 On require, index.js auto-loads support.js which reassembles download hosts at runtime from string fragments e.g. Cloudflare Workers subdomains under...