MAL-2026-17312 Malicious code in json-bigint-rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b71b917a0504deb87a597d9d07527179c2d6bb9ec1f836caa34d6145aa043 On require, index.js instantiates the shipped json-bigint-rs.wasm module and, for imports declared under the 'wasm:js/string-constants' module...

CVE-2026-27574

OneUptime CVE-2026-27574 affects versions 9.5.13 and below where the custom JavaScript monitor uses Node.js node:vm to run user-supplied code. This enables sandbox escape via a one-liner, granting full access to the host process because the probe runs with host networking and stores cluster crede...