sextant-cli (0.0.1-rc30) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc30)

sextant-cli-linux-arm64 NPM version 0.0.1-rc30 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc30 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc32) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc32)

sextant-cli-linux-arm64 NPM version 0.0.1-rc32 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc32 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc33) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc33)

sextant-cli-linux-arm64 NPM version 0.0.1-rc33 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc33 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc35) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc35)

sextant-cli-linux-arm64 NPM version 0.0.1-rc35 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc35 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc7) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc7)

sextant-cli-linux-arm64 NPM version 0.0.1-rc7 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc7 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc8) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc8)

sextant-cli-linux-arm64 NPM version 0.0.1-rc8 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

Malicious code in sextant-cli-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34f69b5a68c549feccfb32cc2dbfbf2d4c787a4876241027b4299305fd2c53 The package is a platform-specific leaf linux/arm64 whose only shipped artifact is a 12 MB stripped Go binary at bin/sxt. The package.json omits...

sextant-cli (0.0.1-rc11) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc11)

sextant-cli-linux-arm64 NPM version 0.0.1-rc11 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc11 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc12) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc12)

sextant-cli-linux-arm64 NPM version 0.0.1-rc12 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc12 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc25) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc25)

sextant-cli-linux-arm64 NPM version 0.0.1-rc25 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc25 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc29) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc29)

sextant-cli-linux-arm64 NPM version 0.0.1-rc29 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc29 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via XML encryption processing. An attacker can cause denial of service by supplying a crafted XML document that triggers excessive resource consumption or causes the application to...

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR and Blazor Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

SUSE-SU-2026:2327-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. An attacker can exhaust system resources by sending specially crafted requests over the network, resulting in service unavailability for legitimate users. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...