Malicious code in 3layerdipstackr7ib9k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e700d8fdf8a230a433bbf1fc3084c4a823335f7fbf4b2bca2ab54595564deed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfooret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a96b773b8a52501913b2bbbba6dcfb0bc50211ed6588fcd849bdacde6182d3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14729 Malicious code in 3layerdipstackds3oln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1497135f91ba31b1cc557c7a3b42aa6fdb7baf359f42a12d64ba790205f024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14907 Malicious code in 3layerdipstackric51a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9b5da84dcd786b48c9edfa3b886499d937bd726347d4b3ccf77c24d73fa67b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackcjddnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f570311b982469189c0f9d6222fe75dccbb9813a993b3f5f1be896dd3629bd7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14830 Malicious code in 3layerdipstackmiputn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56e30fdaec0a29e17b8585f734b0f1bce4c113fee11313a7b2ae9f775053cda The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackyqrxdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4a1b449e872d6368112e9ea9d653e7919c643eac89dfeb4a86f58468134df8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackp6m8ir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4875c48bc13fde1d2d33629e1518c300633d60ba1aeacdd809694a797ff48942 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack4dhmdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0ccaa499343ec1f18b5618c6f7e9c86899fee1d1e184e9cbf419add99187c0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackl21ibf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc6ccc6467814c4ddf095d64904d3b0d2f475dbcd599ddcf02f43329cbdbf49 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14643 Malicious code in 3layerdipstack6jqkjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3282758727328d8477c022b3347d6a69f149c13a840749cbd71039d28b7aeeb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14810 Malicious code in 3layerdipstackl21ibf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc6ccc6467814c4ddf095d64904d3b0d2f475dbcd599ddcf02f43329cbdbf49 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackk5ewlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be1dcacd3491d48fd7d39459b01ebcd86aca30f25b13b54f663f6229039f70f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14767 Malicious code in 3layerdipstackgqt6yc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c59714eecb0470fad815ea33918fb40a82d7d9e73da4be2cd14575961183d1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14854 Malicious code in 3layerdipstackobk93q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f10fd4f721af0eac918746c4dcde96ec112c5c7676c3a851cccf71c9f1e378 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14808 Malicious code in 3layerdipstackkysrek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d1f569a2e645d005f3e8dd8f757dfa4b26f11d80dbea28773cf8528c0501af The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvo9oet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f53e28f09e643707b557426c50a77c03eb7f0d2ca03b7aaf7385150c23ec78 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-42008

Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as an internal authentication field. Any host permitted to act as a trusted proxy can authenticate as any user without...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-10051 and CVE-2026-6790 reported for jetty-server-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10051 DESCRIPTION: In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the...

CVE-2026-81100

tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, making t...