186296 matches found
MAL-2026-14103 Malicious code in a.poltoradnev-package-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d1659d9d1386305bd1c623cc2e3643375f4e14ad279ece4f3df684ecd53ab5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14102 Malicious code in @siwatfa/yorn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a80ba4dd71c991ac9dfc64dd9954a5ad7a83d2b67cc7807dde863872f9324b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @siwatfa/yorn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a80ba4dd71c991ac9dfc64dd9954a5ad7a83d2b67cc7807dde863872f9324b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass
A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...
ROOT-APP-NPM-CVE-2026-26278 CVE-2026-26278 in fast-xml-parser - Patched by Root
Root has patched CVE-2026-26278 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64641 CVE-2026-64641 in next - Patched by Root
Root has patched CVE-2026-64641 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45109 CVE-2026-45109 in next - Patched by Root
Root has patched CVE-2026-45109 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44577 CVE-2026-44577 in next - Patched by Root
Root has patched CVE-2026-44577 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root
Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44576 CVE-2026-44576 in next - Patched by Root
Root has patched CVE-2026-44576 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root
Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44572 CVE-2026-44572 in next - Patched by Root
Root has patched CVE-2026-44572 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27978 CVE-2026-27978 in next - Patched by Root
Root has patched CVE-2026-27978 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44578 CVE-2026-44578 in next - Patched by Root
Root has patched CVE-2026-44578 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
MAL-2026-14070 Malicious code in @ai-vertical/ai-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...
Malicious code in @ai-vertical/ai-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...