GHSA-66FF-XGX4-VCHM vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, vitess, renovate, pulumi...

CVE-2026-4663

creationtimestamp| type| source ---|---|--- 2026-05-12 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlox6jegzl2s...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

CVE-2026-28952

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination...

CVE-2026-45186

creationtimestamp| type| source ---|---|--- 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 19:56:19+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3mlm2lx2ofq23 2026-05-11 20:00:05+00:00| seen|...

MINI-MRCP-W76Q-C9CW

Bulletin has no description...

MINI-M99X-HF99-WF7G

Bulletin has no description...

CVE-2026-6909

creationtimestamp| type| source ---|---|--- 2026-05-11 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-6909 2026-05-11 11:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll4ndh2hm2q...

CVE-2026-42562

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dtx2v42n 2026-05-09 21:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6fd7nxr2k 2026-06-05 14:49:28+00:00| seen|...

CVE-2026-6411

creationtimestamp| type| source ---|---|--- 2026-05-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-127-01 2026-05-08 01:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcjqguyun2i...

CVE-2025-63704

NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object...

CVE-2026-4665

creationtimestamp| type| source ---|---|--- 2026-05-05 06:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3ky7tk2p2t...

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

Malicious Package

Overview @b2bblocker/showactivationerror is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

CVE-2026-7677 kerwincui FastBee System Notice SysNoticeController.java add cross site scripting

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

CVE-2026-7677 kerwincui FastBee System Notice SysNoticeController.java add cross site scripting

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...