@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=6.0.0-canary.2828, <=7.0.0-canary.2989) +20 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.2.0-canary-cee7939b-20250625, <=19.2.7)

react-server-dom-webpack NPM version =19.2.0-canary-cee7939b-20250625, =1.0.0-canary.12863, =6.0.0-canary.2828, =1.0.0-canary.12863, =5.0.4-next.167, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=6.0.0-canary.2828, <=7.0.0-canary.2989) +20 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.2.0-canary-cee7939b-20250625, <=19.2.7)

react-server-dom-webpack NPM version =19.2.0-canary-cee7939b-20250625, =1.0.0-canary.12863, =6.0.0-canary.2828, =1.0.0-canary.12863, =5.0.4-next.167, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

GHSA-45RX-2JWX-CXFR vulnerabilities

Vulnerabilities for packages: librechat, cadence-web, kibana, langfuse, langfuse-fips, gemini-cli...

CVE-2026-64644 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

CVE-2026-64645 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-C2J3-45GR-MQC4 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, opensearch-dashboards...

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-4C39-4CCG-62R3 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-XGM2-5F3F-MVVC vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-M99W-X7HQ-7VFJ vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

CVE-2026-64642 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-955P-X3MX-JCVP vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: thingsboard, neo4j, apicurio-registry, apache-pulsar, tez, keycloak, celeborn, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis...

MAL-2026-11050 Malicious code in discordnv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f79139609558d677545faa7d5f1d30ec31a54abe9fba990117ec0d27ea3ba48 On import discordnv, init.py invokes mainentry which hides the console window, walks Discord/Chrome/Edge/Brave/Opera/Yandex/Firefox LevelDB/SQLite...