1583 matches found
Malicious code in @antv/g-webgpu (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Malicious code in @antv/g-webgpu-unitchart (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4002 Malicious code in @antv/gi-assets-galaxybase (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4121 Malicious code in @antv/xflow-extension (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4149 Malicious code in onfire.js (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
CVE-2026-42295
A flaw was found in Argo Workflows, an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. The workflow executor logs all artifact repository credentials, such as S3 Simple Storage Service access keys, GCS Google Cloud Storage service account keys, Azure...
SUSE-SU-2026:1938-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936. Patch Instructions: To install this SUSE update use th...
SUSE-SU-2026:1935-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty encryptedkey field but key wrapping algorithm set can lead to a denial of service bsc1262936...
Information Exposure
Spring Cloud Config is vulnerable to Information Exposure. The vulnerability is due to improper validation of requests when using Google Secrets Manager as a backend, which allows an attacker to craft requests that expose secrets from unintended GCP projects...
CVE-2026-31592 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
CVE-2026-31600 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
CVE-2026-31608 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
CVE-2026-43100 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
GHSA-463M-22HH-CHVM vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
GHSA-4GX5-8RX4-VXMJ vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
GHSA-585P-9MG2-6VMM vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
GHSA-RC8C-94M4-FRFH vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...