CVE-2026-76984

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHeaderItem generates and header tags. It escaped the attribute names it wrote, but ran the attribute values through a replacement of " with ". A backslash before a double quote mean...

Malicious code in meta-link-load-earth-parse (npm)

The package meta-link-load-earth-parse was found to contain malicious code...

MAL-2025-26218 Malicious code in meta-link-load-earth-parse (npm)

The package meta-link-load-earth-parse was found to contain malicious code...