CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...

EUVD-2026-95996

Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...

SWE-agent mini-swe-agent encryption issue vulnerability

Versions SWE-agent mini-swe-agent from 1.10.0 through 2.4.6 contain an encryption vulnerability. This vulnerability stems from the omission of --clearenv in BubblewrapEnvironment, allowing sandbox commands to inherit the host environment. Attackers can exploit this by injecting prompts, enabling...

CVE-2026-108265: Origin Validation Error

Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...

PT-2026-109319

Name of the Vulnerable Software and Affected Versions Enclave OS Mini versions prior to wasm-v0.40.0 Description The SGX runtime's RA-TLS challenge certificate path incorrectly handles the quote ReportData by including the certificate public-key hash and client nonce but omitting a value bound to...

Cloud Files Mini Filter Driver Privilege Escalation

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious Package

Overview req-throttle-mini is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview rate-limit-mini is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-102778

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778

The Joomla Extension - svenbluege.de (Event Gallery extension) is vulnerable to Cross-Site Scripting (XSS) and Open Redirect in versions prior to 6.6.0 . When the "Share article links" option is enabled, the share mini page takes the article address from a shared link and prints it into the page ...

EUVD-2026-92453

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

Malicious code in req-throttle-mini (RubyGems)

Source: amazon-inspector 91bd1a5cb0c3bacb52c303b598c520dff6f40695affdb1643dd502cf3981d797 The gem's native-extension script extconf.rb base64-decodes an embedded Ruby payload, writes it to a randomized file under the system temp directory, and spawns a detached ruby process on it before invoking...

Malicious code in rate-limit-mini (RubyGems)

Source: amazon-inspector edfe870cadc07265c0d6144de3019e30aa801b82e20f54e2fd309cc1eae7e4d0 The gem's native extension script ext/extconf.rb base64-decodes an embedded Ruby payload, writes it to a randomly named file under the system temporary directory, and spawns it with the Ruby interpreter befo...

MAL-2026-17567 Malicious code in rate-limit-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in rate-limit-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17568 Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2026-102778: Cross-Site Request Forgery (CSRF)

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...