MAL-2026-11885 Malicious code in @servicetitan/lazy-module (npm)

npm/@servicetitan/lazy-module is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CLEANSTART-2026-RE00985 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.0-r2

Package velero-plugin-for-microsoft-azure-fips version 1.14.0-r2 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-RW79431 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.0-r1

Package velero-plugin-for-microsoft-azure-fips version 1.14.0-r1 fixes 9 vulnerabilities: CVE-2026-27143, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283, CVE-2026-27140...

CLEANSTART-2026-EY91394 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CV84139 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5Q2P-7748-G6QP vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-HFRJ-R4V7-3997 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-3J78-PF43-6MVQ vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

CVE-2026-53212 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-7Q5M-QV9W-C8XX vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-5R3H-V82J-R7RR vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-FJ73-9FR6-G7MW vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu, linux-azure, linux-aws, linux-qemu-melange...

KLA91129 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Synapse can be exploited remotely ...

CVE-2026-13316

Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...

EUVD-2026-40281

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...

CVE-2026-13316

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component. Mitigation Mitigation for this issue is either not availab...