CVE-2026-5950

creationtimestamp| type| source ---|---|--- 2026-05-20 14:33:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmc4ra55ad24 2026-05-20 14:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc5oop7eh2i 2026-05-21 12:20:25+00:00| seen|...

Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

CVE-2026-8627

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:58+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmbp7aqqp524 2026-05-20 10:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmbpbdx6zh2x...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head syzbot reported a problem in ip6erspanrcv 1 Issue is that ip6erspanrcv and erspanrcv no longer make sure erspanbasehdr is present in skb linear part skb-head before getting...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ext4: Avoid crashes when inline data creation occurs after DIO write When an inode is created and written using direct IO, there is no way to clear the EXT4STATEMAYINLINEDATA flag. As a result, when the inode is truncated to just...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nsfs: Permission checks for handling opening have been tightened. Even privileged services should not necessarily be able to access the namespaces of other privileged services, so that they cannot leak information to each other...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: veth: Ensure that the eth header is in the linear part of the skb structure. After feeding a decapsulated packet to a veth device using actmirred, skbheadlen might be set to 0. However, vethxmit calls devforwardskb, which expects...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: iptunnel: ensure that the inner header is pulled in iptunnelrcv The same fixes were applied in the following issues: 8d975c15c0cd “ip6tunnel: ensure that the inner header is pulled in ip6tnlrcv” 1ca1ba465e55 “geneve: ensu...

CVE-2026-6549

creationtimestamp| type| source ---|---|--- 2026-05-20 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmb6ivqo4q2a...

CVE-2026-43618

creationtimestamp| type| source ---|---|--- 2026-05-20 03:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw3floka2w 2026-05-20 03:12:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmawptyklz2i 2026-05-20 04:18:43+00:00| seen|...

CVE-2026-6871

creationtimestamp| type| source ---|---|--- 2026-05-20 02:39:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauud2jhc2i...

MAL-2026-4239 Malicious code in etherjs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335b4f699510e2bb1171a9137655f6977d5554f508e612eab97b4239c1249be1 package.json declares a postinstall script that performs an HTTPS GET to an ephemeral pinggy-free.link tunnel URL...

MAL-2026-4243 Malicious code in ganache-cli-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144bbaf975156b3114f5526a7e9a8ffbe8eb411a541c7e457b7bf444200a02c5 Package name impersonates the widely-used ganache-cli Ethereum development tool but ships only a 138-byte index.js stub that wraps...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-021504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021504 advisory. In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'getdumpable' logic The 'dumpability' of a task is fundamentally about the...

CVE-2026-34358

creationtimestamp| type| source ---|---|--- 2026-05-19 23:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaioiuwkz2g 2026-05-19 23:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaiyukcv72p...

CVE-2026-5090

creationtimestamp| type| source ---|---|--- 2026-05-19 22:08:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmafpoatgc22 2026-05-19 22:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahk7a4xu2p...

CVE-2026-8073

creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma6kokbey2c 2026-05-20 02:55:03+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmavpopt3b2q...

CVE-2026-8955

creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520 2026-05-20 02:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mmasq4ron32w 2026-05-20 02:01:31+00:00| seen|...

CVE-2026-33633

creationtimestamp| type| source ---|---|--- 2026-05-19 19:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3chpmjk2w 2026-05-19 19:47:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mma5tcue5g2c 2026-05-19 20:18:07+00:00| seen|...

UBUNTU-CVE-2026-43493

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAYBACKLOG requests MAYBACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications...