629290 matches found
GHSA-VGXQ-4VM2-QMP7 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64068 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu-melange...
GHSA-8M3C-C648-2XJJ vulnerabilities
Vulnerabilities for packages: unleash-fips, langfuse, kibana, unleash, langfuse-fips...
GHSA-RGJ7-G3M4-5G8C vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, peerdb-ui, zitadel, langfuse-fips, librechat, langfuse, keep-fips, keep, homepage...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-M93F-WJ8C-RP8P vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-FCCG-MWVH-QQG4 vulnerabilities
Vulnerabilities for packages: cassandra-fips, commercial-elasticsearch, kafka, akhq, apache-hop, neo4j, spark-fips, sonarqube, elasticsearch-fips, zookeeper-fips, kayenta-fips, hadoop-fips, strimzi-kafka-operator, cassandra, flyway, cruise-control, cassandra-reaper, spark, kayenta, keycloak, seat...
ROOT-APP-MAVEN-CVE-2024-29371 CVE-2024-29371 in org.bitbucket.b_c:jose4j - Patched by Root
Root has patched CVE-2024-29371 in the org.bitbucket.bc:jose4j package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-42740 CVE-2021-42740 in shell-quote - Patched by Root
Root has patched CVE-2021-42740 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2020-7774 CVE-2020-7774 in y18n - Patched by Root
Root has patched CVE-2020-7774 in the y18n package for Root:npm. Multiple fixed versions available...
Malicious code in etoro-cashout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aa14d0b9945053b63f4396f09365c5daefec60a25e931f165b3473e7c564f1 The package's preinstall.js lifecycle script runs on npm install and executes host reconnaissance commands whoami, ipconfig/ip addr, directory listin...
MAL-2026-16117 Malicious code in etoro-cashout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aa14d0b9945053b63f4396f09365c5daefec60a25e931f165b3473e7c564f1 The package's preinstall.js lifecycle script runs on npm install and executes host reconnaissance commands whoami, ipconfig/ip addr, directory listin...
Malicious code in etoro-builders (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname,...
MAL-2026-16116 Malicious code in etoro-builders (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname,...
Malicious code in etoro-aggregator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...
MAL-2026-16111 Malicious code in etoro-aggregator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...
Malicious code in etoro-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe27d37497e77c8f0eca9105a6b64c646c7ef1439c05ec50edaf40215037f92 [email protected] ships a preinstall lifecycle script preinstall.js that automatically runs on npm install. The script collects installer host...
MAL-2026-16112 Malicious code in etoro-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe27d37497e77c8f0eca9105a6b64c646c7ef1439c05ec50edaf40215037f92 [email protected] ships a preinstall lifecycle script preinstall.js that automatically runs on npm install. The script collects installer host...
Malicious code in etoro-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6228f994962694d4434f53d20d6a5a1b877b39a3498236327da9d0385284d9 The preinstall lifecycle script in [email protected] preinstall.js auto-executes on npm install and performs an HTTP GET to a hardcoded bare-IP...