CVE-2026-55968 Apache Thrift: Node.js quadratic-time DoS in server receive transports

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in @rootio/axios - Patched by Root

Root has patched CVE-2026-42043 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42037 CVE-2026-42037 in @rootio/axios - Patched by Root

Root has patched CVE-2026-42037 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42039 CVE-2026-42039 in @rootio/axios - Patched by Root

Root has patched CVE-2026-42039 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54288 CVE-2026-54288 in @rootio/hono - Patched by Root

Root has patched CVE-2026-54288 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-56761 CVE-2026-56761 in @rootio/hono - Patched by Root

Root has patched CVE-2026-56761 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47675 CVE-2026-47675 in @rootio/hono - Patched by Root

Root has patched CVE-2026-47675 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

CVE-2026-64277

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...

ROOT-APP-NPM-CVE-2026-5079 CVE-2026-5079 in @rootio/multer - Patched by Root

Root has patched CVE-2026-5079 in the @rootio/multer package for Root:npm. Multiple fixed versions available...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39827)

In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...

Linux Distros Unpatched Vulnerability : CVE-2026-64220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time w...

UBUNTU-CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24bbd0f16f929682cd413abde1e40578db9fa5b2ad8cb7cdc9927c70f5f5f710 The OpenSSF Package Analysis project identified '@ks-radar/radar' @ 22.0.0 npm as malicious. It is considered malicious because: - The package...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, pulumi, haraka, renovate, kibana, actions-runner, lerna, node-gyp, opensearch-dashboards-fips, sqlpad, graalvm, npm, code-server, kubeflow-centraldashboard, gemini-cli...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, opensearch-dashboards, npm, sqlpad, node-gyp, code-server, lerna, pulumi...

SUSE CVE-2026-64301

In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...

MAL-2026-11065 Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 474db4780bfc49ff2146966bdd508c123baf4d39c636e27aaba1996a0016d8f6 The OpenSSF Package Analysis project identified 'swiperangular' @ 5.9999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-11072 Malicious code in wsh4_edu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e68d4c62ae8440581c4400e1cdacb7877912eb23610e273432d18cea61574785 The OpenSSF Package Analysis project identified 'wsh4edu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicat...

SUSE CVE-2026-64413

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...