ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root

Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...

MAL-2026-13842 Malicious code in vlbhvgovbbhfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...

Malicious code in mnhdjoweuq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095b631b3ea82334aa5d3ffb4c015340670beebb533d0e016023d997a3ce7e56 Package contains only package.json and index.html, with main pointing at the HTML file. index.html mimics a Cloudflare Turnstile 'Just a moment'...

ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in axios - Patched by Root

Root has patched CVE-2026-42043 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42035 CVE-2026-42035 in axios - Patched by Root

Root has patched CVE-2026-42035 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44496 CVE-2026-44496 in axios - Patched by Root

Root has patched CVE-2026-44496 in the axios package for Root:npm. Multiple fixed versions available...

CVE-2026-68821

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68821

The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...

EUVD-2026-56469

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

...

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

...

Windows Package Manager Elevation of Privilege Vulnerability

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

ROOT-APP-NPM-CVE-2026-42039 CVE-2026-42039 in axios - Patched by Root

Root has patched CVE-2026-42039 in the axios package for Root:npm. Multiple fixed versions available...

RHBA-2020:0582 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory

Bulletin has no description...

ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root

Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

MAL-2026-13669 Malicious code in specials-resources-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...

Malicious code in specials-resources-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...

EUVD-2026-44768

jsii-diff: Command Injection via npm: package argument...

Malicious code in svelte-cache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...

MAL-2026-13676 Malicious code in svelte-cache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...