144828 matches found
ROOT-APP-NPM-AIKIDO-2025-10435 AIKIDO-2025-10435 in multer - Patched by Root
Root has patched AIKIDO-2025-10435 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in basic-ftp - Patched by Root
Root has patched CVE-2026-44240 in the basic-ftp package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-6V7Q-WJVX-W8WG GHSA-6v7q-wjvx-w8wg in basic-ftp - Patched by Root
Root has patched GHSA-6v7q-wjvx-w8wg in the basic-ftp package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability in Perl
CPAN.pm before version 2.35 does not verify TLS certificates when downloading distributions via HTTPS...
Astra Linux – Vulnerability in apt
The vulnerability of the PackageFromTask function in the software for installing, updating, and deleting Apt software packages is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in axios - Patched by Root
Root has patched CVE-2026-44489 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-46175 CVE-2022-46175 in json5 - Patched by Root
Root has patched CVE-2022-46175 in the json5 package for Root:npm. Multiple fixed versions available...
RHBA-2020:0582 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory
Bulletin has no description...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root
Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...
Malicious Package
Overview edouardfalafel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dalilbaguette is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview easypanel-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dajouka-tffdd-tazc12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview node-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious Package
Overview dajouka-ad-rac is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dajouka-tfsdfcdd-tazc12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +2036 more potentially affected by CVE-2026-63670 via sanitize-html (>=2.1.0, <=2.17.5)
sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =5.0.2, =0.0.1, =1.0.0, =3.0.0, =1.3.0, =1.0.0, =1.38.0, =1.3.2, =1.7.1 and more Source cves: CVE-2026-63670 Source advisory: OSV:GHSA-JXWJ-J7WR-GFRW...
