137279 matches found
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: actions-runner, kubeflow-centraldashboard, graalvm, sqlpad, code-server, gitlab-rails-ce-fips, opensearch-dashboards, kibana, lerna, wazuh-dashboard, saf, gitlab-rails-ce, prism, opensearch-dashboards-fips, wazuh-dashboard-fips, pulumi, npm...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, kubeflow-centraldashboard, saf, lerna, pulumi, sqlpad...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, kubeflow-centraldashboard, saf, lerna, pulumi, sqlpad...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, kubeflow-centraldashboard, saf, lerna, pulumi, sqlpad...
ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10689 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-44003 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10841 AIKIDO-2026-10841 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10841 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-24118 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
MAL-2026-10968 Malicious code in commonweb-rewards (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741bb412733dcbcc7aac51796dd6e3b0a6b86439c4886aad1b0418959051d0b3 commonweb-rewards ships an empty index.js and declares a single dependency ltidisafe whose version spec is a direct URL to a tarball on a non-publish...
MAL-2026-10966 Malicious code in commonweb-card (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45f481316bef278d1accb9df9fb9e30f5789c2c783c749c7f8903868130a71 [email protected] ships an effectively empty main module index.js exports an empty object and its package.json declares a dependency 'ltidisafe'...
MAL-2026-10971 Malicious code in cxpw-offers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2288ef5dfb841556f7ba4907a025270dfda3439820215b7d98e644afca78a306 cxpw-offers ships an empty index.js and declares its only dependency ltidisafe as a direct tarball URL at...
NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding groups vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.16...
Malicious code in lwc-slds-lbc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935d61576a437061ec8dcb5799e9a40e2798fa900b8e6f5638eeb204dfdf0c79 package.json declares a preinstall script that executes examples/verify.js on npm install. verify.js invokes setUserFromPublicIp from src/index.js,...
MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e7f2cab2ae9d15c37e236190c685c42b7d3a0ecf92b7b72e9ad00b936ff186 Package name suggests an AWS CDK construct for ALB/Lambda but the shipped code is a thin @sentry/node wrapper. The npm preinstall script runs npm...
MAL-2026-10905 Malicious code in win-build-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10902 Malicious code in solana-web3-patched (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10897 Malicious code in golan125-homepage-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10896 Malicious code in flow-eslint-oxidized (npm)
--- -= Per source details. Do not edit below this line.=-...