CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-19041

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

Malicious code in remote_session_elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2127d34a7d033e96e00a679891716647f0a00f7590ad738b43d985e83dda69 Package version 9999.0.0 is published with placeholder metadata "Shared utility helpers.", no author — the canonical shape of a dependency-confusion...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-QC46400 Security fixes in $pkgname-${pkgver%%.*} 3.8.9-r2

Package $pkgname-$pkgver%%. version 3.8.9-r2 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-OW39793 Security fixes in mongodb 8.2.1-r1

Package mongodb version 8.2.1-r1 fixes 3 vulnerabilities: CVE-2025-61727, CVE-2025-58181, CVE-2025-14847...

CLEANSTART-2026-JG22599 Security fixes in $pkgname-${pkgver%%.*} 3.9.14-r1

Package $pkgname-$pkgver%%. version 3.9.14-r1 fixes 1 vulnerabilities: CVE-2025-67030...

CLEANSTART-2026-WH63397 Security fixes in k8ssandra-client-fips 0.6.4-r5

Package k8ssandra-client-fips version 0.6.4-r5 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

OPENSUSE-SU-2026:11327-1 apache-sshd-2.19.0-2.1 on GA media

These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in commonweb-moneymovement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee7c2ba53e2c7adae6a2b54776c21490794ee8f28fde98f5c61778380de1382 Package [email protected] contains 2 files with no a static rule matches and no traced behavioral findings. The version number 99.9.1 an...

PT-2026-61509

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

CVE-2014-3608 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

OPENSUSE-SU-2026:11163-1 libxreaderdocument3-4.6.5-1.1 on GA media

These are all security issues fixed in the libxreaderdocument3-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in dtxto1ols (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926fc822a2a507fafa6d2e1bb02a9b2bada7d89d3042bd3f0cac0ba2fd7c1991 package.json declares a postinstall script that runs automatically on npm install. The script performs filesystem reconnaissance find / -type f...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, openstack-glance-2026.1-fips, superset, openstack-glance-2026.1, wazuh-manager, airflow-core, openstack-placement-2025.2-fips, airflow-postgres-fips, netbox, openstack-glance-2025.1, ggshield, openstack-keystone-2025.1-fips,...

OPENSUSE-SU-2026:11043-1 python313-distributed-2026.6.0-1.1 on GA media

These are all security issues fixed in the python313-distributed-2026.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10996-1 git-bug-0.10.1-6.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-6.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in gethandler-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6925d4c07df297f8cb573df4d85a396794d8793179e7a97f2cfde3aadfcfbc On npm install, postinstall.js unconditionally sends an HTTPS GET to https://webhook.site/18dc4281-d366-438a-9186-76fbcd56ade5 carrying the installer...

Malicious code in getui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf281a31a53827497d9a24ff0602f277b568f495a00c14603c3e9bf11a30327a On npm install, postinstall.js issues an HTTPS GET to https://webhook.site/18dc4281-d366-438a-9186-76fbcd56ade5 with query parameters containing the...