CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

Malicious code in core-js-gnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57686b95f827f2c3b0501d97b6575e077247255bf5d4227ae9bc8bedd43937 On install, package.json runs node init.js as a postinstall hook. init.js collects host identifiers os.hostname, os.userInfo.username, os.platform,...

MAL-2026-17474 Malicious code in core-js-gnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57686b95f827f2c3b0501d97b6575e077247255bf5d4227ae9bc8bedd43937 On install, package.json runs node init.js as a postinstall hook. init.js collects host identifiers os.hostname, os.userInfo.username, os.platform,...

CVE-2024-4367

CVE-2024-4367 POC 사용법 python poc.py mal.pdf "alert'0x2r2'" 참고 자료 CVE-2024-4367: PDF.js에서 임의 JS 실행 PDF.js POC 스캐너 템플릿...

CVE-2025-12135

WPBookit getparam'csscode'; $jscode= $request-getparam'jscode'; updateoption 'wpbcustomcodedata', 'csscode' = $csscode, 'jscode' = $jscode ; コード実行 （/core/shortcodes/class-wpbookit-shortcode-abstract.php:20-27）: $wpbcustomcode= getoption 'wpbcustomcodedata', 'csscode' = '', 'jscode' = '' ;...

bigint-buffer-safe

bigint-buffer-safe 安全でピュアJSなドロップイン代替品。オリジナルの bigint-buffer を置き換えます。CVE-2025-3194 CVSS 7.5、バッファオーバーフロー / DoS を修正します。 依存関係ゼロ。ネイティブバインディングなし。Node.js とブラウザで動作します。 なぜ存在するのか? 元の bigint-buffer パッケージには高深刻度のバッファオーバーフローの脆弱性 があります CVE-2025-3194, CVSS 7.5。これは toBigIntLEnull...

Linux Distros Unpatched Vulnerability : CVE-2026-86536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apach...

CLSA-2026-1790963665 TuxCare security update for js-yaml (5 CVEs)

TuxCare rebuilt js-yaml to address 5 CVEs. Fixed in 3.13.1-tuxcare.1...

Security Bulletin: Multiple secuirty vulnerabilities addressed with IBM Business Automation Workflow traditional and containers September 2026

Summary In addition to updating many operating system level packages, IBM Business Automation Workflow traditional and container fixes address the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-53668 DESCRIPTION: React Router is a router for React. In versions 6.30.2 through 6.30...

CVE-2026-104846

The Seroval library (versions 0.12.0 through 1.6.2 ) is vulnerable to an unexpected code execution flaw during the fromJSON deserialization process. The root cause involves the deserialization of a fulfilled Promise control node, which can pass a plugin-produced callable-bearing thenable to a nat...

CLSA-2026-1790950271 TuxCare security update for js-yaml (2 CVEs)

TuxCare rebuilt js-yaml to address 2 CVEs. Fixed in 4.1.0-tuxcare.4...

CLSA-2026-1790950175 TuxCare security update for js-yaml (1 CVE)

TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 4.3.0-tuxcare.4...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1,...

CLSA-2026-1790944389 TuxCare security update for js-yaml (1 CVE)

TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.7.0-tuxcare.4...

CLSA-2026-1790944177 TuxCare security update for js-yaml (2 CVEs)

TuxCare rebuilt js-yaml to address 2 CVEs. Fixed in 4.2.0-tuxcare.2...

CLSA-2026-1790944130 TuxCare security update for js-yaml (1 CVE)

TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.15.2-tuxcare.1...

AZL-105401 CVE-2026-86536 affecting package thrift 0.24.0-1

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

DEBIAN-CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

UBUNTU-CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...