CVE-2026-58482

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

CVE-2026-28220

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

CVE-2026-28220 Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

CVE-2026-28220

CVE-2026-28220 concerns the Wazuh Cluster Distributed API (DAPI). Before version 4.14.5, the master node could be coerced to deserialize an attacker-controlled callable and run it under an attacker-controlled RBAC context due to a permissive as_wazuh_object() deserialization and client-supplied r...

EUVD-2026-45978

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

CVE-2026-28220 Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

CVE-2026-28220 Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

CVE-2026-53371

A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...

ROOT-APP-NPM-CVE-2022-0235 CVE-2022-0235 in @rootio/node-fetch - Patched by Root

Root has patched CVE-2022-0235 in the @rootio/node-fetch package for Root:npm. Multiple fixed versions available...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

Malicious code in your-unique-package-name1337 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10905 Malicious code in win-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9 The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. ...

Malicious code in solana-web3-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073f4c1e75630bbf1c535a334f4d7f233a73439240bc22e69bac0e926c8c58a0 Package name closely mirrors the widely-used @solana/web3.js Solana SDK while being published under an unrelated, unscoped name. The bundled...

Malicious code in solana-web3-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...

Malicious code in solana-web3-patched (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99e6f959c8df3e2933c860ba3d36dc5dbbd27d97a69a3e97a5a7feaf7e24899 Package name 'solana-web3-patched' resembles the legitimate '@solana/web3.js' library and is published as an unscoped lookalike at version 1.0.0. The...

MAL-2026-10902 Malicious code in solana-web3-patched (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99e6f959c8df3e2933c860ba3d36dc5dbbd27d97a69a3e97a5a7feaf7e24899 Package name 'solana-web3-patched' resembles the legitimate '@solana/web3.js' library and is published as an unscoped lookalike at version 1.0.0. The...

MAL-2026-10899 Malicious code in solana-web3-fixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d36c0e75143828e4a93135d0c54fb34dd6e75588a493ade663a1fa4b231230c Package name 'solana-web3-fixed' resembles a fix-branded variant of the legitimate '@solana/web3.js' library, a pattern frequently used in...

Malicious code in solana-rpc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57e3e79e60f9b8ec7f7c9b5199ecab2efaf72566eaed0f358a3b80adad5558d The package's bundled entry points lib/index.cjs.js and lib/index.esm.js co-locate require'childprocess', fetch/POST/GET calls, and references to...