630133 matches found
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
ROOT-APP-PYPI-CVE-2024-5569 CVE-2024-5569 in zipp - Patched by Root
Root has patched CVE-2024-5569 in the zipp package for Root:PyPI. Multiple fixed versions available...
Malicious Package
Overview nebulajs-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview native-runner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview vite-plugin-crypto is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ROOT-OS-DEBIAN-12-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root
Root has patched CVE-2026-7017 in the perl package for Root:Debian:12. Multiple fixed versions available...
EUVD-2026-88239
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root
Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-12816 CVE-2025-12816 in node-forge - Patched by Root
Root has patched CVE-2025-12816 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root
Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root
Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root
Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root
Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root
Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64649 CVE-2026-64649 in next - Patched by Root
Root has patched CVE-2026-64649 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44579 CVE-2026-44579 in next - Patched by Root
Root has patched CVE-2026-44579 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root
Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44577 CVE-2026-44577 in next - Patched by Root
Root has patched CVE-2026-44577 in the next package for Root:npm. Multiple fixed versions available...