ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root

Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-12816 CVE-2025-12816 in node-forge - Patched by Root

Root has patched CVE-2025-12816 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root

Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44582 CVE-2026-44582 in next - Patched by Root

Root has patched CVE-2026-44582 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root

Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44577 CVE-2026-44577 in next - Patched by Root

Root has patched CVE-2026-44577 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root

Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root

Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44579 CVE-2026-44579 in next - Patched by Root

Root has patched CVE-2026-44579 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64649 CVE-2026-64649 in next - Patched by Root

Root has patched CVE-2026-64649 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-45736 CVE-2026-45736 in ws - Patched by Root

Root has patched CVE-2026-45736 in the ws package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview @bb1ptest23/test-paket is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview api-typings is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @consts/links is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

Malicious code in @bb1ptest23/test-paket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88718be23e6bf753453adc1110580e87b675e7881b945d419746afe4bebcfa5e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ossf-package-analysis...

[SECURITY] Fedora 45 Update: dnf5-5.4.6.0-2.fc45

DNF5 is a command-line package manager that automates the process of installi ng, upgrading, configuring, and removing computer programs in a consistent manner. It supports RPM packages, modulemd modules, and comps groups & environments...

CVE

Control Tower Notification Enabler Este paquete cdk instala una función Lambda, con un rol IAM asociado, y suscribe la función Lambda a las notificaciones de seguridad agregadas de Control Tower. En caso de una violación de una regla de Control Tower por ejemplo, un bucket S3 de acceso público, l...