com.ecfront:ez-rpc (>=2.1.0, <=2.2.0), io.vertx:vertx-codetrans (3.0.0-dev_preview1) +14 more potentially affected by CVE-2026-1002 via io.vertx:vertx-core (3.0.0-dev_preview1)

io.vertx:vertx-core MAVEN version 3.0.0-devpreview1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - com.ecfront:ez-rpc =2.1.0, =2.2.0 - io.vertx:vertx-codetrans 3.0.0-devpreview1 - io.vertx:vertx-ext-parent...

com.goodow.vertx:vertx-mod-elasticsearch (1.1.1), io.vertx:lang-js (1.1.0) +4 more potentially affected by CVE-2026-1002 via io.vertx:vertx-core (2.1rc3)

io.vertx:vertx-core MAVEN version 2.1rc3 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - com.goodow.vertx:vertx-mod-elasticsearch 1.1.1 - io.vertx:lang-js 1.1.0 - io.vertx:lang-rhino 2.1.1 -...

Security Bulletin: A security vulnerability in WebSphere Liberty affects IBM Robotic Process Automation for Cloud Pak (CVE-2020-36732).

Summary A security vulnerability in WebSphere Liberty affects IBM Robotic Process Automation for Cloud Pak. WebSphere Application Liberty is used by IBM Robotic Process Automation as part of Antivirus and Abbyy containers as well as UMS. This bulletin identifies the fixes required to address this...

Linux Distros Unpatched Vulnerability : CVE-2026-21636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js's permission model allows Unix Domain Socket UDS connections to bypass network restrictions when --permission is enabled. Even without...

Linux Distros Unpatched Vulnerability : CVE-2025-55130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js's Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By...

Linux Distros Unpatched Vulnerability : CVE-2025-59465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

Summary A potential Regular Expression Denial of Service ReDoS vulnerability was identified in tarteaucitron.js in the handling of the issuuid parameter. Details The issue was caused by the use of insufficiently constrained regular expressions applied to attacker-controlled input: if...

CVE-2022-50932: Improper Limitation of a Pathname to a Restricted Directory

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users

Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users TL;DR Node.js/V8 makes a best-effort attempt to recover from stack space exhaustion with a catchable error, which frameworks have come to rely on for service availability. An edg...

Tuesday, January 13, 2026 Security Releases

Tuesday, January 13, 2026 Security Releases Security releases available Updates are now available for the 25.x, 24.x, 22.x, and 20.x Node.js release lines to address: 3 high severity issues. 4 medium severity issues. 1 low severity issue. This security release includes the following dependency...

Malicious code in framer-motion-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e5cb35fb0103b934b0b73f1556a3b5a7b83ecb9cd1c627b4c44d4a35d658f3 The package framer-motion-js was found to contain malicious code. Source: ghsa-malware 3ef4e281f7e4f36adf0bb94b56ac5c7c3d34d58b634939eb1cab10906136e9...

EUVD-2026-1974

Malicious code in framer-motion-js npm...

Malicious Package

Overview inquirer-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview framer-motion-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview luxon-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in jsdom-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312dfde89b7b4606901cb1278d28d2a7876859e2bd23da752f8c5e4979b9fe8f The package jsdom-js was found to contain malicious code. Source: ghsa-malware c21558fc0a67b24e6df7eddf211f517317d151b885fd971b9fc38608046b733d Any...

Malicious code in inquirer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477898ce4223aefeb43a52fa776b7236a069b176dff1c3a9cbfbb13ad57d6a59 The package inquirer-js was found to contain malicious code. Source: ghsa-malware 06897ddbb1fc8aa0c06fc7389198f7f96eceefdbbc08ead1032436eb45a0a0c3 An...

Malicious code in immer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc0710eb5a0ad9d9eb01cbd2d6f7c1b9cc39b07636d82a05f2cafdf953756bd The package immer-js was found to contain malicious code. Source: ghsa-malware 920c7d161c9e90ea35c168d53dd01e0920704e5f35e76d330fac6fb3c0a2cb87 Any...

MAL-2026-220 Malicious code in framer-motion-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e5cb35fb0103b934b0b73f1556a3b5a7b83ecb9cd1c627b4c44d4a35d658f3 The package framer-motion-js was found to contain malicious code. Source: ghsa-malware 3ef4e281f7e4f36adf0bb94b56ac5c7c3d34d58b634939eb1cab10906136e9...