CVE-2026-21435 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kubo, k3s, spegel...

Open the wrong “PDF” and attackers gain remote access to your PC

Cybercriminals behind a campaign dubbed DEADVAX are taking phishing one step further by delivering malware inside virtual hard disks that pretend to be ordinary PDF documents. Open the wrong “invoice” or “purchase order” and you won't see a document at all. Instead, Windows mounts a virtual drive...

EUVD-2021-1391

Malware in sbrugna...

EUVD-2021-1239

Malware in sbrugna...

EUVD-2019-0287

Malware in sbrugna...

EUVD-2023-1578

Malicious code in bioql PyPI...

EUVD-2022-50666

Malicious code in bioql PyPI...

EUVD-2024-1286

Malicious code in bioql PyPI...

EUVD-2022-50667

Malicious code in bioql PyPI...

MAL-2025-47428 Malicious code in @bonk-sdk/ipfs (npm)

The package @bonk-sdk/ipfs was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @metadata-ipfs/bonk.fun-ipfs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41450 Malicious code in @metadata-ipfs/bonk.fun-ipfs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-26229 Malicious code in metadata-ipfs-pack (npm)

The package metadata-ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-23339 Malicious code in ipfs-pack (npm)

The package ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in metadata-ipfs-pack (npm)

The package metadata-ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ipfs-pack (npm)

The package ipfs-pack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cerbos-fips, crossplane-provider-azure-storage, kubelet-csr-approver, apache-exporter, ghaudit, trust-manager, stakater-reloader-fips, fq, consul-k8s, loki-fips, tekton-pipelines-fips, splunk-otel-collector, undock, prometheus-pushgateway-fips, wolfictl, mongo-tools,...

GHSA-F26W-GH5M-QQ77 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...