CVE-2026-42343

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit a 500ms polling interval for memory management and...

CVE-2026-42343

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit a 500ms polling interval for memory management and...

[SECURITY] Fedora 43 Update: nodejs20-20.20.0-2.fc43

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

[SECURITY] Fedora 43 Update: nodejs22-22.22.0-2.fc43

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

Fleet security vulnerabilities

Fleet is an open-source device management platform that supports various operating systems and devices. It helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. It’s free and flexible. There is a security vulnerability in Fleet, which stems from imprope...

EUVD-2025-117293

Malicious code in intensive-blush-iguana npm...

MAL-2025-138809 Malicious code in intensive-blush-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e8beb11a3148d321a00d6171dfb5dca236febffc4bf6b5b3b302be4dc5c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91055

Malicious code in intensiveparakeetz3n npm...

EUVD-2025-78980

Malicious code in intensivemacawz3n npm...

EUVD-2025-63475

Malicious code in intensivesolez3n npm...

Malicious code in intensive-red-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1c7124029bb86dff596bfaf77c9a7161e5bba66c80d666ecedb6ee4b8d516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53703

Malicious code in intensive-fuchsia-jaguar npm...

EUVD-2025-53705

Malicious code in intensive-aqua-skink npm...

Malicious code in intensive-harlequin-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc61065e8e442a856599550e15ea8d32790409ae1fc1459eef53ead6b5856de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53700

Malicious code in intensive-red-vicuna npm...

EUVD-2025-53704

Malicious code in intensive-crimson-finch npm...

EUVD-2025-53701

Malicious code in intensive-orange-toucan npm...

EUVD-2025-53702

Malicious code in intensive-harlequin-wildebeest npm...

Malicious code in intensive_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9630230af3e21f202f80514af803ee4b803f16fffab76e12de7cb2a755096a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2006-0859

Malware in sbrugna...