630010 matches found
MAL-2026-16042 Malicious code in krdpass-auth-react-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...
MGASA-2026-0383 Updated freerdp packages fix security vulnerabilities
Updated packages bring lot of security fixes. Please see the links for additional information...
Updated freerdp packages fix security vulnerabilities
Updated packages bring lot of security fixes. Please see the links for additional information...
CLEANSTART-2026-FT20664 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-AJ39907 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-AE16267 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CVE-2026-82710
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...
[SECURITY] Fedora 44 Update: chirp-0.4.0^20260828-1.fc44
Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...
[SECURITY] Fedora 43 Update: perl-Net-OAuth-0.33-1.fc43
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
CLEANSTART-2026-ID18571 brace-expansion through 5
Multiple security vulnerabilities affect the npm package. brace-expansion through 5. See references for individual vulnerability details...
CLEANSTART-2026-GV17876 Helm is a package manager for Charts for Kubernetes
Multiple security vulnerabilities affect the rancher-fleet-agent package. Helm is a package manager for Charts for Kubernetes. See references for individual vulnerability details...
CVE-2026-82710
usage_rules (ash-project, Elixir Mix task) is vulnerable to terminal escape sequence injection via the Mix.Tasks.UsageRules.SearchDocs formatter. Publisher-controlled fields from Hex documentation are interpolated verbatim without neutralizing terminal control characters, allowing a malicious pac...
CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...
OPENSUSE-SU-2026:11723-1 python313-comfyui-frontend-package-1.52.7-1.1 on GA media
These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed...
EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3311)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary:...
PT-2026-89114
Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description When WITH UNCOMPRESSED CODEC is enabled, the heif context add image tile function accepts a tile with component-plane dimensions that differ from the prototype image geometry. The ImageItem...
Malicious code in plogme (npm)
plogme is a renamed fork of the Baileys WhatsApp Web library from the same publisher-controlled family as @crysnovax/baileys MAL-2026-15917, and versions 1.0.0 through 1.0.3 carry the same forced-follow and fingerprint modules. lib/Utils/channel-policy.js javascript-obfuscator output, identical t...
Fedora 43 : GitPython (2026-e6bd4d25ab)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e6bd4d25ab advisory. Version 3.1.60 fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9. Version 3.1.61 fixes accidental removal of public class regex on Acto...
Oracle Linux 10 : ELSA-2026-64818-0: / skopeo (ELSA-2026-648180)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648180 advisory. 2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add te...
PT-2026-89117
Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description The heif region item add region inline mask data function in libheif/api/libheif/heif regions.cc accepts the mask data len parameter without verifying if it matches the byte count required by the...