Malicious code in @cacheable/node-cache (npm)

npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...

Malicious code in ecto (npm)

npm/ecto version 5.0.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub Action...

MAL-2026-11966 Malicious code in ecto (npm)

npm/ecto version 5.0.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub Action...

MAL-2026-11963 Malicious code in cacheable (npm)

npm/cacheable version 2.5.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub...

Malicious code in cacheable (npm)

npm/cacheable version 2.5.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub...

Malicious code in cache-manager (npm)

npm/cache-manager version 7.2.10 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through...

Malicious code in cacheable-request (npm)

npm/cacheable-request version 13.0.20 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases throug...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, gitlab-workhorse-ce...

CVE-2026-69248

creationtimestamp| type| source ---|---|--- 2026-08-03 22:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ecmrxfdhpjgt4 2026-08-03 22:31:31+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f 2026-08-03 22:35:04+00:00| published-proof-of-concept|...

CVE-2026-69083

creationtimestamp| type| source ---|---|--- 2026-08-03 22:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96493 2026-08-04 00:00:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96493 2026-08-04 05:00:05+00:00| published-proof-of-concept|...

CVE-2026-54272

creationtimestamp| type| source ---|---|--- 2026-08-03 20:35:09+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg 2026-08-04 10:32:20+00:00| seen| https://gist.github.com/alon710/539d26ece962aef59230f2218cc50bae 2026-08-04...

CVE-2026-69198

creationtimestamp| type| source ---|---|--- 2026-08-03 20:35:05+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-4xrf-jv44-h6hh 2026-08-04 09:31:38+00:00| seen| https://gist.github.com/alon710/7d8f1377f69b3f931098d4cd17c3c6cd 2026-08-04...

GHSA-JJ27-H5HQ-8X99

creationtimestamp| type| source ---|---|--- 2026-08-03 19:31:37+00:00| seen| https://gist.github.com/alon710/bdd530b55ab23396bc2ee2dc380962dc...

CVE-2026-69153

creationtimestamp| type| source ---|---|--- 2026-08-03 18:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gp5oyt6frvyqh 2026-08-03 18:31:17+00:00| seen| https://gist.github.com/alon710/cea21195fa5b2fd7a130b5ccd15ff053 2026-08-03 18:35:03+00:00| published-proof-of-concept|...

CVE-2026-68930

creationtimestamp| type| source ---|---|--- 2026-08-03 16:35:03+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-m65r-rprj-r5rg...

GHSA-JHPW-976M-542J

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151...

CVE-2019-14793

creationtimestamp| type| source ---|---|--- 2026-08-03 03:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-14793.yaml 2026-08-04 00:00:06+00:00| confirmed|...

[SECURITY] Fedora 44 Update: gh-2.97.0-2.fc44

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

CVE-2026-67308

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

EUVD-2026-51855

GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...