CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root

Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-FWG2-594C-JP42 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-71852 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root

Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...

GHSA-JM78-9FVV-MHGR vulnerabilities

Vulnerabilities for packages: checkov, opal...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-4GMW-GG2M-W46P vulnerabilities

Vulnerabilities for packages: checkov...

OPENSUSE-SU-2026:11473-1 dhcpcd-10.5.0-1.1 on GA media

These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-P9JM-Q85P-7MCP vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, json-server, dotstatsuite-supercore, unleash, nextcloud-server, renovate, unleash-fips, arangodb, langfuse, gitlab-rails-ce...

Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f33793b44bee99cf40ae7b4ecfdd4d8ab388edf96753862f96b289ad3e95d2 Package contains only 2 files and no code patterns indicating credential access, network exfiltration, install-time code execution, silent relay, or...

Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6f280e621703ad0ddfe97298c5a5dded61dd1b8fc877729ad0202f6a23a77 Package [email protected] shows no evidence of exfiltration, install-time remote code execution,...