616714 matches found
Malicious code in chroma-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...
CLSA-2026-1789285864 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 4 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.5...
GHSA-GG4H-3HG2-GRPC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
[SECURITY] Fedora 45 Update: PackageKit-1.4.0-1.fc45
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)
TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...
Malicious code in id79-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
CLSA-2026-1789219285 TuxCare security update for 123 packages (4 CVEs)
TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001...
GHSA-PF96-P4FJ-6566 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
CVE-2026-84382 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
GHSA-8XX6-HGC6-GC2M vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
CVE-2026-84379 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
CVE-2026-84380 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
GHSA-G6GW-C38X-MQFC vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard-fips, kibana, wazuh-dashboard...
CVE-2026-84364 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard-fips, kibana, wazuh-dashboard...
CVE-2026-84363 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard-fips, kibana, wazuh-dashboard...