GHSA-QX2G-XRX7-VFH8 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-VP2X-QP44-57V7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-F5VJ-F2HX-8M93 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...

CVE-2026-56876 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-8G6F-QW9X-4Q6Q vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-71514 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-78680 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81727 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81724 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-8X48-8G7J-RQXP vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-M4RF-3FR8-XWX3 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-72818 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-CV22-G7MW-8V73 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-VP2X-QP44-57V7 vulnerabilities

Vulnerabilities for packages: open-webui...

MAL-2026-15932 Malicious code in chartkit-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 888ecdd39e3a032c1b16877250049ae7f99e7eb523c5a55ae2c06080c343da97 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CLSA-2026-1788550289 TuxCare security update for 40 packages (4 CVEs)

TuxCare rebuilt 40 packages to address 4 CVEs. Fixed in 10.1.42-tuxcare.9...

MAL-2026-16004 Malicious code in ulid-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cde9990177f51fd4637a17f48d850c61f3ade933fe3fce078d5846125a5fa01 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in ulid-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cde9990177f51fd4637a17f48d850c61f3ade933fe3fce078d5846125a5fa01 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in metricboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a511a75c8c42dcd677dd3814265d3befefa7f339bdc6b0336788635813e837 MetricBoxLite 1.0 collects the installer's username getpass.getuser and hostname socket.gethostname, JSON-encodes them, and POSTs the payload to a...