630136 matches found
ROOT-APP-NPM-CVE-2025-71319 CVE-2025-71319 in image-size - Patched by Root
Root has patched CVE-2025-71319 in the image-size package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-71329 CVE-2025-71329 in image-size - Patched by Root
Root has patched CVE-2025-71329 in the image-size package for Root:npm. Multiple fixed versions available...
CLEANSTART-2026-CI10932 In Eclipse Jetty, a first HTTP/1
Security vulnerability affects the kafka package. In Eclipse Jetty, a first HTTP/1...
CLEANSTART-2026-SC86417 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
CVE-2025-47273 affects multiple packages. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. See references for individual vulnerability details...
overwrite
Laravel Nova 向けの、簡単かつ完全なフレキシブルフィールド。繰り返し可能で柔軟なフィールドグループに最適です。 クイックスタート ここでは、すぐに始めるための非常に簡潔なガイドを紹介します。 完全なドキュメントはこちらをご覧ください: https://whitecube.github.io/nova-flexible-content インストール composer require whitecube/nova-flexible-content 使用方法 フレキシブルフィールドを使用すると、繰り返し可能で順序変更可能なフィールドグループを簡単に管理できます。Laravel No...
Malicious code in rai6jaisahthaghee5ou-loader-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de53fbd264f685e033789fe5929c63f322366219d80707ec419a48a85e253c9 The package's main module is an IIFE that injects a element pointing at the hardcoded URL https://nee1ahnaw7.xsses.link and appends it to the documen...
MAL-2026-17238 Malicious code in rai6jaisahthaghee5ou-loader-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de53fbd264f685e033789fe5929c63f322366219d80707ec419a48a85e253c9 The package's main module is an IIFE that injects a element pointing at the hardcoded URL https://nee1ahnaw7.xsses.link and appends it to the documen...
20231122-npm (1.0.0), 2048.io (0.0.1) +6536 more potentially affected by CVE-2026-87859 via morgan (>=1.0.0, <=1.12.0)
morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-87859 Source advisory: OSV:GHSA-9F6G-J8CH-79G4...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @aikidosec/broker-client (>=0.0.2, <=1.0.51) +135 more potentially affected by CVE-2026-101913 via ip-address (>=10.0.1, <=10.5.0)
ip-address NPM version =10.0.1, =0.3.1, =0.0.2, =0.3.1, =9.9.0-ruixiang.1, =1.1.0-dev-0d04f54.1, =3.3.0, =1.5.40, =0.2.0-beta.4, =0.3.0-beta.1, =1.0.35, =1.0.31, =7.0.0-canary.2, =7.5.9 and more Source cves: CVE-2026-101913 Source advisory: SNYK:JS-IPADDRESS-20250964...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
ROOT-APP-PYPI-CVE-2024-5569 CVE-2024-5569 in zipp - Patched by Root
Root has patched CVE-2024-5569 in the zipp package for Root:PyPI. Multiple fixed versions available...
Malicious Package
Overview vite-plugin-crypto is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview nebulajs-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview native-runner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ROOT-OS-DEBIAN-12-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root
Root has patched CVE-2026-7017 in the perl package for Root:Debian:12. Multiple fixed versions available...
EUVD-2026-88239
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in setuptools - Patched by Root
Root has patched CVE-2026-24049 in the setuptools package for Root:PyPI. Multiple fixed versions available...