CVE-2026-79015 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78894 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78899 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78906 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78940 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78942 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78943 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78945 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78948 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78950 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78967 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78985 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-79011 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-78963 vulnerabilities

Vulnerabilities for packages: chromium...

SUSE-SU-2026:3969-1 Security update for python

This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...

Security update for python

This update for python fixes the following issues: Security issues fixed: CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl Patch Instructions: To install this SUSE upda...

Malicious code in tailwind-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956943b584d41e6307a8bb5bfdd821bd062f5f9f4776b912ee05ce41fe1829e5 The package is published under a name that mimics the Tailwind CSS forms plugin and its package.json points repository at...

MAL-2026-15920 Malicious code in box-sign-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76143eab11057809af00414cb665446366f039e3cbf1fa82aae06a1093cbbf49 [email protected] is a dependency-confusion vehicle positioned against the internal Box namespace @box/sign-client. Its package.json declares a...

Malicious code in claude-channel-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db25d41cbf34007ee5be9e31462d8346c3ec51dcb5b72160e76739aaedf4ad [email protected] is a dependency-confusion probe. package.json declares preinstall and postinstall hooks node index.js --save-prod and a...

Malicious code in real-router-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bc9af22f0b3feafc2dbd863d7ce4b9ba26418ab58e87bc231123004a40a450 Package ships telemetry.js, an obfuscated module string-array accessor pattern hiding identifiers and the destination that reads host identity...