NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.22...

EUVD-2026-52373

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: zulu-psu, openjdk...

Malicious code in test-dev-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ca0e645623ac78190f4921a1d577eeaaeaaca953f6310565db2b981d90b21 The package contains three files and produced no a static rule matches and no traced code behaviors of concern. The name and version pattern suggest ...

GHSA-PJP7-Q6WP-97QX

creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...

GHSA-X23C-287F-QQV5 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, apache-nifi-registry, camunda, camunda-zeebe, kafbat-ui-fips, apache-activemq-fips, zipkin, keycloak-config-cli, apache-activemq, jenkins, kafbat-ui...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, camunda, camunda-zeebe, kafbat-ui-fips, apache-activemq-fips, apache-activemq, kafbat-ui...

GHSA-XC5W-4V5W-7X65

creationtimestamp| type| source ---|---|--- 2026-07-31 08:32:20+00:00| seen| https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11...

GHSA-XJFQ-6RHW-XJ37 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FF33-VW52-C9P4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-JPP9-98P6-WX73 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-724G-MXRG-4QVM vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-64M9-QG9M-54W5 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-3MWP-7C29-VP5V vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-54W4-5MRC-HFP8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8RFC-PHX9-6VC2 vulnerabilities

Vulnerabilities for packages: firefox...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3414-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3414-1 advisory. - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided bsc1272575....