35887 matches found
reverse-engineering-vault
Reverse Engineering Vault Browse the notes directly on GitHub...
Malicious code in @vertexa/prisma-fetch-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af31d3f7a70c62590a05ef03453c16828fa36dd8f3887608cc1f0655bea9b4db Package is published under the @vertexa scope but brands itself as @prisma/fetch-engine: README titled ' @prisma/fetch-engine', author 'Tim Suchanek ...
MAL-2026-13608 Malicious code in @vertexa/prisma-fetch-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af31d3f7a70c62590a05ef03453c16828fa36dd8f3887608cc1f0655bea9b4db Package is published under the @vertexa scope but brands itself as @prisma/fetch-engine: README titled ' @prisma/fetch-engine', author 'Tim Suchanek ...
GHSA-265M-7826-WJQM
creationtimestamp| type| source ---|---|--- 2026-08-07 11:31:42+00:00| seen| https://gist.github.com/alon710/28df1596668f7d78b0163ad585068607...
GHSA-H3H4-J2QV-PV4J vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-777R-4CWX-G26V vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-17505
creationtimestamp| type| source ---|---|--- 2026-08-07 06:03:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-17505.yaml 2026-08-08 00:02:14+00:00| confirmed|...
Linux Distros Unpatched Vulnerability : CVE-2026-64654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull reques...
Linux Distros Unpatched Vulnerability : CVE-2026-64655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the...
Linux Distros Unpatched Vulnerability : CVE-2026-64653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding,...
Linux Distros Unpatched Vulnerability : CVE-2026-64652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain...
CVE-2026-71430
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:12+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-8hcv-x26h-mcgp 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f 2026-10-04 00:58:54+00:00|...
CVE-2026-71498
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:09+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-j4r3-hg7j-8chg 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...
CVE-2026-56381
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g3hp-vvqf-8vw6...
CVE-2026-56393
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4mgv-366x-qxvx...
AZL-95468 CVE-2026-64652 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...
AZL-95472 CVE-2026-64655 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
AZL-95462 CVE-2026-64654 affecting package gh for versions less than 2.97.0-1
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...
DEBIAN-CVE-2026-64655
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
CVE-2026-64652
GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...