GHSA-8CJM-8MP7-R2XF vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-PWR6-CVF5-35F3 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1, authentik-fips...

GHSA-8QCX-XF44-272X vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1, authentik-fips...

MGASA-2026-0330 Updated php8.5 packages fix security vulnerabilities

Updated php 8.5 packages fix some security vulnerabilities. For details see the references...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

Malicious code in svelte-kit-streak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52621d72853042287f8152d66c3f465b510af17f7b16283d9ab64ee01dc13cb [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating exfiltration, install-time remote...

MAL-2026-13726 Malicious code in svelte-kit-streak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52621d72853042287f8152d66c3f465b510af17f7b16283d9ab64ee01dc13cb [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating exfiltration, install-time remote...

ROOT-APP-MAVEN-CVE-2024-22243 CVE-2024-22243 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22243 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22745 CVE-2026-22745 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22745 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

Malicious code in tailwind-elements-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f8605cff87e89b9f1a50c65fc27af278335cf414a8b4fb52ea4090e9fdd71b No malicious behavior was identified in the package contents. The package name resembles popular Tailwind-related UI libraries, which can indicate...

Malicious code in fsbrowse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7866973ba5f2971efedd027cce57aefb5b8f27d7304de323261832c29bbd82 The package's main entry file index.js contains a legitimate Express file-server module followed by a unicode-escape-obfuscated IIFE appended after...

Malicious code in @sqlite-prime/nodesql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5b84b0145aa2612302c7153b5848582cdda2f6c88c802dfc0618cd376dd617 @sqlite-prime/[email protected] ships a verbatim copy of the well-known buffer library as its main entry index.js with a single injected top-level...

ROOT-OS-DEBIAN-13-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root

Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:13. Multiple fixed versions available...

GHSA-28WG-GHJ8-5HJV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, jitsucom-jitsu, langfuse...

ROOT-OS-DEBIAN-12-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root

Root has patched CVE-2026-7017 in the perl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root

Root has patched CVE-2026-7017 in the perl package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2026-68414

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

DEBIAN-CVE-2026-68411

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: clamp virtio RX length before skbput hwsimvirtiorxwork passes the virtqueue used-ring length reported by the device straight to skbput on a fixed-size receive skb. A backend reporting a length larger than the...