MAL-2026-269 Malicious code in auc-2-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...

MAL-2026-320 Malicious code in zis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...

EUVD-2026-3086

Malicious code in auc-2-lib npm...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004091 advisory. A double-free can happen in idrremoveall in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001757 advisory. A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of...

CVE-2026-21899

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, in base64urlDecode, padding-stripping...

ROS-20260112-7314

A vulnerability in the dmirrordeviceevictchunk function of the lib/testhmm.c module of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2022-35085

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...

CVE-2020-12118

The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

CVE-2023-50252

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag. The problem pops up especially when the href attribute from the tag has not been sanitized. This can lead to an unsafe file...

Malicious code in cng-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...

Malicious Package

Overview cng-web-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2026-1837

Malicious code in cng-web-lib npm...

MAL-2026-176 Malicious code in mixpanel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11bdefc18a5b590716cefe2036f1f759ccb42fd3c22c420ac524a479ff9f01 The package mixpanel-lib was found to contain malicious code. Source: ghsa-malware 03fe07795e21df3debb6abf06b5b47f19ddd7996e5be6b06d8dd07fa37e7cd2f A...

EUVD-2026-1840

Malicious code in secguest-lib npm...

Malicious Package

Overview secguest-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

org.webjars.npm:bitcore-lib (=0.15.0), org.webjars.npm:bitcore-mnemonic (=1.5.0) +6 more potentially affected by CVE-2025-14505 via org.webjars.npm:elliptic (>=6.4.0 <=6.6.1)

org.webjars.npm:elliptic MAVEN version =6.4.0, =4.0.0, =3.2.0, =4.0.2 Source cves: CVE-2025-14505 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14908845...

CVE-2024-14020

A weakness has been identified in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes...

CVE-2022-27271

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...