RHSA-2026:3516 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

DEBIAN-CVE-2026-3202

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service...

RHSA-2026:2817 Red Hat Security Advisory: pcs security update

Bulletin has no description...

AZL-76859 CVE-2025-47911 affecting package application-gateway-kubernetes-ingress 1.7.7-2

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CLEANSTART-2026-AV38242 Cancelling a query (e

Multiple security vulnerabilities affect the fluent-operator-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-IW06531 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

RHSA-2026:1558 Red Hat Security Advisory: python3 security update

Bulletin has no description...

DSA-6107-1 bind9 - security update

Bulletin has no description...

Malicious Package

Overview elf-stats-nutmeg-sleigh-350 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CLSA-2025-1765451524 Fix CVE(s): CVE-2025-53057, CVE-2025-53066, CVE-2025-61748

OpenJDK 8u472 release - CVE-2025-53057: fix unauthorized remote data-modification - CVE-2025-53066: fix unauthorized remote data access - CVE-2025-61748: fix limited remote unauthorized data modification - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-October/thread.html...

EUVD-2025-199914

Malicious code in com.unity.sharp-zip-lib npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-178103

Malicious code in library-frontend-update-eclipse npm...

MAL-2025-144370 Malicious code in library-betelgeuse-yonder-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tapai94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f8f3721d08f177135a6f90338d52636c1d445b0d7921eccd49a7e7711e0569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76711 Malicious code in ade-lumpur59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea8f2d526cfb499576baa7f93363a08efc408504d223a14996f4c200d5ea269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-191643 Malicious code in krisp-audio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1940a2f9c0907fd633cc07fcc96fad89f2e4c55cbd38d5fe8df09d1c4048c906 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CLSA-2025-1760704001 Update of sudo

Bump version to 1.8.23-10.0.1.3...

EUVD-2025-32649

Malicious code in @pb-digital/ui-library npm...

Malicious code in ngx-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8f81aec4f30bf22f2a6e8a25a2662c6a72f8873311399d708ffb8d858f1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...