GHSA-5JWX-M54Q-488F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q3C8-P5VP-WR87 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-6RX2-WJR5-47V3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-VXJV-C6CQ-74M6 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-GF33-3XV8-8PX2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GHWP-RJ3V-2JWW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-57PW-4XMG-7294 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10973 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10903 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HWHG-7C6P-XFW2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails...

CVE-2026-48525 vulnerabilities

Vulnerabilities for packages: kserve, superset, datadog-agent, ggshield...

CVE-2026-11701 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-72XP-P242-47P9 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

MAL-2026-5448 Malicious code in mazemap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751317dcad79cec866b8dc69cd60b39e3be8e1bcc45746039835b04ce32445b0 package.json declares its only dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.0.2.tgz...

GHSA-P337-8MM9-6P6X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V4C4-Q9W7-M653 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-31843

The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...

Linux Distros Unpatched Vulnerability : CVE-2026-11043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially...

Security Bulletin: IBM Maximo Application Suite uses once-2.0.0.tgz which is vulnerable to CVE-2026-3449

Summary IBM Maximo Application Suite uses once-2.0.0.tgz which is vulnerable to CVE-2026-3449. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-3449 DESCRIPTION: Versions of the package @tootallnate/once before 3.0.1 are vulnerab...