630010 matches found
MAL-2026-16199 Malicious code in plogme (npm)
plogme is a renamed fork of the Baileys WhatsApp Web library from the same publisher-controlled family as @crysnovax/baileys MAL-2026-15917, and versions 1.0.0 through 1.0.3 carry the same forced-follow and fingerprint modules. lib/Utils/channel-policy.js javascript-obfuscator output, identical t...
PT-2026-88446
Name of the Vulnerable Software and Affected Versions OpenTelemetry.Resources.Host versions prior to 1.16.0-beta.2 Description An untrusted search path issue exists on macOS. The host.id resource attribute detector executes the sh and ioreg binaries using their bare names instead of absolute path...
OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media
These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...
RHEL 9 : redhat-ds:12 (RHSA-2026:65375)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65375 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol LDAP...
git-lfs security update
3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang...
Oracle Linux 10 : ELSA-2026-64796-0: / valkey (ELSA-2026-647960)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647960 advisory. 8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis Tenable has extracted the preceding description block directly...
RHEL 10 : acl (RHSA-2026:64805)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64805 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfa...
CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...
EEF-CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata
Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's...
EUVD-2026-72554
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt. mix igniter.install prints a confirmation panel an anti-typosquatting safeguard listing a package's hex...
CVE-2026-82584
ash-project igniter (an Elixir build tool) is vulnerable to terminal escape sequence injection in its mix igniter.install confirmation panel. The panel builder in Igniter.Project.Deps wrote publisher-controlled fields (meta.description, owner usernames, requirement names, version) to the terminal...
CLSA-2026-1788820092 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.20-tuxcare.6...
Malicious code in telegram-helper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90afeb1d39f1ef3d107f2da6a26c4af8c7efb314bb0f272d45fa755119e1b669 telegramhelper describes itself as "A minimal example Python library" and ships a Russian-language template README the Homepage field is still the...
CLSA-2026-1788814705 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9...
CLSA-2026-1788814439 TuxCare security update for 3 packages (1 CVE)
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 3.2.11-tuxcare.4...
CLSA-2026-1788807216 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 11 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.5...
Malicious code in @cp-shared-14/frontend-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...
MAL-2026-16015 Malicious code in @cp-shared-14/frontend-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...