142971 matches found
ROOT-APP-NPM-CVE-2026-41673 CVE-2026-41673 in @xmldom/xmldom - Patched by Root
Root has patched CVE-2026-41673 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...
GO-2022-0197 vulnerabilities
Vulnerabilities for packages: hey...
GO-2025-3830 vulnerabilities
Vulnerabilities for packages: kargo, openfga, prometheus, cadvisor-fips, spire-server, tw, opentelemetry-collector, spire-server-fips, wolfictl, buildkitd, nerdctl, buf, dagger, grype-fips, trivy, zot, cadvisor, docker-compose, apko-fips, grype, opentelemetry-collector-contrib-fips, syft-fips,...
GO-2023-1589 vulnerabilities
Vulnerabilities for packages: zot...
GO-2024-3295 vulnerabilities
Vulnerabilities for packages: wolfictl, gh...
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...
CVE-2026-59831 affecting package gh for versions less than 2.62.0-20
CVE-2026-59831 affecting package gh for versions less than 2.62.0-20. A patched version of the package is available...
Malicious code in mnhdjoweuq (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095b631b3ea82334aa5d3ffb4c015340670beebb533d0e016023d997a3ce7e56 Package contains only package.json and index.html, with main pointing at the HTML file. index.html mimics a Cloudflare Turnstile 'Just a moment'...
MAL-2026-13842 Malicious code in vlbhvgovbbhfab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...
CVE-2026-68821
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-68821
The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...
EUVD-2026-56469
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
Windows Package Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
PT-2026-70738
Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...
ROOT-APP-NPM-CVE-2026-48816 CVE-2026-48816 in @sigstore/verify - Patched by Root
Root has patched CVE-2026-48816 in the @sigstore/verify package for Root:npm. Multiple fixed versions available...
MAL-2026-13669 Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...