MAL-2026-2987 Malicious code in @bmg-web/bmg-external-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6373b00808251dd64521cfb1864a0bf382c5df23e976984dea8dbebf925bbb63 The package @bmg-web/bmg-external-link was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @bmg-web/bmg-external-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6373b00808251dd64521cfb1864a0bf382c5df23e976984dea8dbebf925bbb63 The package @bmg-web/bmg-external-link was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-41664

creationtimestamp| type| source ---|---|--- 2026-04-22 08:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33lvtwi22e...

CVE-2026-40450

creationtimestamp| type| source ---|---|--- 2026-04-22 08:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33exhwe62n...

CVE-2026-41667

creationtimestamp| type| source ---|---|--- 2026-04-22 08:28:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33bs53k52h...

CVE-2026-22754

creationtimestamp| type| source ---|---|--- 2026-04-22 07:15:26+00:00| seen| Telegram/CS2dujevfXlHsF93idKXet0n8ytFBz1cdJm2cp5u6N6EQ 2026-04-22 08:53:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk34pcwgrk2p 2026-04-22 12:45:25+00:00| seen|...

Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries

Overview LiveOn Meet provided by Japan Media Systems Corporation is a web conferencing system. The installer of LiveOn Meet Client for Windows and the installer of Canon Network Camera Plugin insecurely load Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-32679 This...

CVE-2026-6408

creationtimestamp| type| source ---|---|--- 2026-04-22 04:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2p6yhcil2k...

CVE-2026-6392

creationtimestamp| type| source ---|---|--- 2026-04-22 04:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2nkkpuls2n...

CVE-2026-41457

creationtimestamp| type| source ---|---|--- 2026-04-22 04:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2mtmcsed2i...

CVE-2026-41145

creationtimestamp| type| source ---|---|--- 2026-04-22 02:54:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2imoe7br2t 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

CVE-2026-41131

creationtimestamp| type| source ---|---|--- 2026-04-22 02:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2idpwpez2t...

CVE-2026-41128

creationtimestamp| type| source ---|---|--- 2026-04-22 02:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2i2rinzz2i...

CVE-2026-41129

creationtimestamp| type| source ---|---|--- 2026-04-22 02:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2h42byi32i...

CVE-2026-41126

creationtimestamp| type| source ---|---|--- 2026-04-22 02:14:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2gffj6dj2k...

CVE-2026-4367

creationtimestamp| type| source ---|---|--- 2026-04-22 02:01:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mk2fo63fp42q 2026-05-10 20:00:10+00:00| seen| https://jvn.jp/en/jp/JVN18013369 2026-06-26 22:50:45+00:00| seen|...

CVE-2026-5721

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4. This is due to insufficient input sanitization and output escaping in the prepareCellOutput method of the...

PT-2026-34510

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the split utility of uutils coreutils. The program attempts to prevent data loss by checking for identity between input and output files using their file paths before initiating the split operation. However, the utility subsequently...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a security vulnerability in uutils coreutils, which stems from a race condition during the chcon recursive operation between checking time and execution time. This condition may allow local...

PT-2026-34508

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference or -n flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force overwrite mode was also enabled. Thi...