CLSA-2026-1784769539 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 4 ch.qos.logback packages to address 1 CVE. Fixed in 1.4.11-tuxcare.1...

CLSA-2026-1784509763 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.27-tuxcare.6...

CLSA-2026-1784509765 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.24-tuxcare.4...

CLSA-2026-1782867595 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.39-tuxcare.15...

CLSA-2026-1781139209 TuxCare security update for @azure (8 CVEs)

TuxCare rebuilt 4 @azure packages to address 8 CVEs. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1777509589 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.2...

CLSA-2026-1776126823 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1...

CLSA-2026-1776040412 TuxCare security update for org.springframework (13 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2...

CLSA-2026-1774916751 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1...

CLSA-2025-1767053309 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...

CLSA-2025-1765930087 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3...

CLSA-2025-1765411678 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2...

CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1759795579 TuxCare security update for 4 packages (19 CVEs)

TuxCare rebuilt 4 packages to address 19 CVEs. Fixed in 9.0.83-tuxcare.1...

CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...

MAL-2026-10934 Malicious code in twilio-internal (npm)

The twilio-internal package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against ...

Malicious code in twilio-serverless (npm)

The twilio-serverless package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution agains...

MAL-2026-10933 Malicious code in twilio-deploy (npm)

The twilio-deploy package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against a...

CVE-2026-48523 vulnerabilities

Vulnerabilities for packages: litellm, openstack-horizon-2025.2-fips, wazuh-manager, openstack-keystone-2026.1, openstack-horizon-2026.1-fips, openstack-glance-2025.2-fips, openstack-placement-2025.2-fips, openstack-placement-2026.1-fips, openstack-glance-2025.2, openstack-glance-2026.1,...

MAL-2026-5155 Malicious code in @ownit/core (npm)

Dependency confusion attack campaign targeting Scandinavian telecommunications and digital services organizations Telenor, Ownit, Vimla, and Customer 360 / C360. Four packages published by the debating0166 npm account use inflated version numbers 99.0.x to win npm registry resolution over private...