CVE-2026-22820

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5...

CVE-2023-40710

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b...

Security Bulletin: IBM Storage Ceph is vulnerable to Exposure of Sensitive Information Through Data Queries in Golang Go (CVE-2023-45288)

Summary Golang Go is used by IBM Storage Ceph as part of RGW and in assorted other locations. CVE-2023-45288 Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION...

CVE-2023-53874

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability...

rexml: REXML denial of service

A denial of service flaw has been discovered in the rubygem REXML. Certain input can cause excess cpu usage and given sufficiently large input this can affect program performance...

GHSA-2XPW-W6GG-JR37 urllib3 streaming API improperly handles highly compressed data

Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP...

Malicious code in excess_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccc3c05b73994322b8d9949e5e484972159f7d0eb577953b8cf97865ff8ec3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105445

Malicious code in excessslugz3n npm...

MAL-2025-113759 Malicious code in excess_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09889b002b522f06e6f4847347362cf0abff404cece087191e6f905d53a160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79297

Malicious code in excesslungfishz3n npm...

EUVD-2025-81998

Malicious code in excesscoraldumbs npm...

Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70550

Malicious code in excesscheetahz3n npm...

Malicious code in excess_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab7eadf4bf71e318587dcb1e30041cc7d585bf2ccbf9247b98c5e050b7b2765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102323 Malicious code in excess_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab7eadf4bf71e318587dcb1e30041cc7d585bf2ccbf9247b98c5e050b7b2765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94341 Malicious code in excess_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab302a43c48829055811be8425d1cdb34ad04c1756624c3dc73f35509e44e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54505

Malicious code in excess-turquoise-loon npm...

EUVD-2025-54506

Malicious code in excess-scarlet-guineafowl npm...

EUVD-2025-47814

Malicious code in excessbatz3n npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990195 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check...