sextant-cli (0.0.1-rc12) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc12)

sextant-cli-linux-arm64 NPM version 0.0.1-rc12 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc12 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

sextant-cli (0.0.1-rc13) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc13)

sextant-cli-linux-arm64 NPM version 0.0.1-rc13 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc13 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12043...

Malicious code in sextant-cli-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34f69b5a68c549feccfb32cc2dbfbf2d4c787a4876241027b4299305fd2c53 The package is a platform-specific leaf linux/arm64 whose only shipped artifact is a 12 MB stripped Go binary at bin/sxt. The package.json omits...

sextant-cli (0.0.1-rc12) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc12)

sextant-cli-linux-arm64 NPM version 0.0.1-rc12 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc12 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc11) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc11)

sextant-cli-linux-arm64 NPM version 0.0.1-rc11 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc11 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc29) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc29)

sextant-cli-linux-arm64 NPM version 0.0.1-rc29 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc29 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

sextant-cli (0.0.1-rc25) potentially affected by unknown CVE via sextant-cli-linux-arm64 (0.0.1-rc25)

sextant-cli-linux-arm64 NPM version 0.0.1-rc25 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-linux-arm64 and may be impacted: - sextant-cli 0.0.1-rc25 Source cves: unknown CVE Source advisory: SNYK:JS-SEXTANTCLILINUXARM64-18550794...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via XML encryption processing. An attacker can cause denial of service by supplying a crafted XML document that triggers excessive resource consumption or causes the application to...

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR and Blazor Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

SUSE-SU-2026:2327-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. An attacker can exhaust system resources by sending specially crafted requests over the network, resulting in service unavailability for legitimate users. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...

PT-2026-46945

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.35.11 Description An issue exists in the Envoy gateway related to HTTP/2, which can be exploited to cause a denial of service, potentially bringing down an Evonode. There have been reports of elevated activities...

Infinite loop

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Infinite loop in the FormDataReader.ProcessFormKeys...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttlin...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read when decoding malformed Base64Url input. An attacker can cause a disruption of service. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to version 9.0.14, 10.0.4 or higher. References - GitHub Commit -...