MAL-2026-15824 Malicious code in @stellarshift/token-units (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...

Malicious code in @stellarshift/token-units (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...

Information Disclosure axios Dependency in Jira Service Management Data Center

This High severity Information Disclosure vulnerability was introduced in versions 10.3.22 and 11.3.7 of Jira Service Management Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N...

Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

MGASA-2026-0366 Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

SUSE-SU-2026:23463-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...

OPENSUSE-SU-2026:21744-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...

K000163148: Linux kernel vulnerability CVE-2026-63810

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace...

xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization

Summary An EntityReference node can be created with an invalid, attacker-controlled name through Document.createEntityReferencename. When this node is serialized directly with: js serializer.serializeToStringref, requireWellFormed: true the invalid nodeName is emitted into the serialized XML...

GHSA-6GMQ-8VP8-GCM6 xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization

Summary An EntityReference node can be created with an invalid, attacker-controlled name through Document.createEntityReferencename. When this node is serialized directly with: js serializer.serializeToStringref, requireWellFormed: true the invalid nodeName is emitted into the serialized XML...

BIT-MYSQL-CLIENT-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

BIT-MARIADB-MIN-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

BIT-MARIADB-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

Prototype Pollution

Overview @tiptap/core is a headless rich text editor Affected versions of this package are vulnerable to Prototype Pollution via the mergeAttributes function. An attacker can inject malicious prototype properties by supplying crafted objects with a proto key, which can result in inherited...

GHSA-CP6Q-959Q-F8RH Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes

Summary @tiptap/core's public mergeAttributes helper uses ordinary bracket assignment on keys returned by Object.entries. An own proto key from JSON therefore invokes the legacy prototype setter on the fresh merged object. The function returns an object whose prototype is attacker-controlled, whi...

Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes

Summary @tiptap/core's public mergeAttributes helper uses ordinary bracket assignment on keys returned by Object.entries. An own proto key from JSON therefore invokes the legacy prototype setter on the fresh merged object. The function returns an object whose prototype is attacker-controlled, whi...

elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections

Summary The PHP connector's CSRF gate protects many mutating commands, but it does not protect the netmount connector command. In the shipped minimal connector setup, FTP network mounting is enabled by default, so a cross-site request can force an elFinder instance to mount an attacker-chosen FTP...

GHSA-9HJF-W35W-6VX2 elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections

Summary The PHP connector's CSRF gate protects many mutating commands, but it does not protect the netmount connector command. In the shipped minimal connector setup, FTP network mounting is enabled by default, so a cross-site request can force an elFinder instance to mount an attacker-chosen FTP...

K000162603: NGINX ngx_http_js_module vulnerability CVE-2026-78222

Security Advisory Description A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can cause an NGINX worker to terminate unexpectedly when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP...

Security Bulletin: Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1

Summary Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1, which are addressed in Fix Pack 12.1.1.2 Vulnerability Details CVEID:CVE-2026-73086 DESCRIPTION: nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the...