PYSEC-2026-210

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious long query to any application using the parser to...

UBUNTU-CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

EUVD-2025-179034

Malicious code in eslint-plugin-pyxis-library-style-loader npm...

EUVD-2025-112640

Malicious code in hyperion-eslint-config-oberon-babel npm...

MAL-2025-26253 Malicious code in meteor-pyxis-semantic-ui-lint (npm)

The package meteor-pyxis-semantic-ui-lint was found to contain malicious code...