613820 matches found
Malicious code in hardhat-gas-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f908ec767bb48d5cf889b1035fc89ff03d0422bfa043e3c361c4faf0002df95 On module load, the package schedules a randomized 5-15 second setTimeout that POSTs a JSON body containing os.hostname, os.userInfo.username,...
MAL-2026-11020 Malicious code in hardhat-gas-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f908ec767bb48d5cf889b1035fc89ff03d0422bfa043e3c361c4faf0002df95 On module load, the package schedules a randomized 5-15 second setTimeout that POSTs a JSON body containing os.hostname, os.userInfo.username,...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322069...
@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)
n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322068...
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...
GHSA-89VP-JRXV-24W8 JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64647 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64647 Source advisory:...
NPM: Next.js: Unbounded Server Action payload in Edge runtime
NPM: Next.js: Unbounded Server Action payload in Edge runtime vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64646 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64646 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64645 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64645 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64644 Source advisory:...
47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)
next NPM version =15.5.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: OSV:GHSA-Q8WF-6R8G-63CH...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +940 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64643 Source advisory:...