255745 matches found
MAL-2026-6915 Malicious code in @sqlite-list/createsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955f0446501d4d7834ea1d6f4daf244eed7c040462485ba6dc794488f455ea9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PYSEC-2026-1946 Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Vulnerability Summary A type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple GraphQL types are mapped to the same underlying model while using the relay node...
glib2: Fix of CVE-2026-58016
CVE-2026-58016: fix XML parser state handling for element nesting in D-Bus introspection XML...
MAL-2026-6922 Malicious code in mcp-server-pg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d68bdfced357622e33e4608bd35ded4d8988ea6dc7da073b3a83075978815d On npm install, scripts/postinstall.js unconditionally reads a range of installer-owned identity and configuration files and POSTs a JSON payload to ...
ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @rootio/react-router - Patched by Root
Root has patched CVE-2026-22029 in the @rootio/react-router package for Root:npm. Multiple fixed versions available...
JLSEC-2026-657 Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions
Summary When Deno was run in BYONM mode nodeModulesDir: "manual", the module resolver did not validate that a package's resolved entrypoint stayed within its nodemodules// directory. A malicious package.json whose main field contained .. segments was able to resolve to an arbitrary path on disk,...
MAL-2026-7446 Malicious code in zircuit-vault (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7444 Malicious code in zircuit-oracle (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7443 Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7442 Malicious code in yreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7441 Malicious code in wreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7440 Malicious code in winston-middleware (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7439 Malicious code in win-env-setup (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7438 Malicious code in whaleco-assets-json (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7436 Malicious code in wazirx-localtestnpm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7434 Malicious code in wallarm-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7433 Malicious code in vubiquity-website (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7432 Malicious code in vscode-component-explorer (npm)
--- -= Per source details. Do not edit below this line.=-...