CVE-2026-46384 vulnerabilities

Vulnerabilities for packages: dapr...

Linux Distros Unpatched Vulnerability : CVE-2026-55707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets fro...

Malicious code in wgsfmore63 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swc421 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rxsouthjan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6646 Malicious code in @sentryx-libraries/auth-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 774e35b0d1dd89d33c2121f90c2d7c3d6a8ecc7165396d63db9416c03c284250 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2026-55766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.1, guzzlehttp/psr7 did not reject CR/LF characters in certain first-party...

CVE-2026-11677 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-45109 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

RHEL 9 : systemd (RHSA-2026:13677)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:13677 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

RHEL 9 : golang (RHSA-2026:7883)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7883 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: cmd/go: Arbitrary file write via malicious...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, gitlab-rails-ce-fips, ruby3.2-rails, ruby3.4-rack, gitlab-rails-ce, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, logstash, ruby3.4-rails, gitlab-cng, ruby3.3-rack, kube-fluentd-operator...

Linux Distros Unpatched Vulnerability : CVE-2026-31988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the...

Linux Distros Unpatched Vulnerability : CVE-2026-3381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library...

Malicious code in launchdarkly-cpp-networking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4fb76fdf3a3ab10ddc884a1fcc11f57ef3b0e44df500c5f2881f40cec0b20 The package launchdarkly-cpp-networking was found to contain malicious code. Source: ghsa-malware...

MAL-2026-283 Malicious code in flag-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...

CVE-2025-1828

Crypt::Random Perl package 1.05 through 1.55 may use rand function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon egd service is not available Crypt::Random will default to use the insecure...

MAL-2025-192790 Malicious code in elf-stats-sprucey-giftbox-118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035ac821e338f2ed92d28b154d6f755ddc02a75bcc924c62ed56259a54ca73c The package elf-stats-sprucey-giftbox-118 was found to contain malicious code...

MAL-2025-192030 Malicious code in elf-stats-festive-snowglobe-440 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1525045b40a900d06a5cfe0dfb53d898962bdacfd9cdac0b270565ff2d35c2 The package elf-stats-festive-snowglobe-440 was found to contain malicious code...

Malicious code in elf-stats-wintry-hammer-196 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a233b514fe8fba42d7d03ba33cd11c6cc6d54bbf2e0616e6db6528240592d00c The package elf-stats-wintry-hammer-196 was found to contain malicious code...