629281 matches found
OPENSUSE-SU-2026:11749-1 strongswan-6.1.0-1.1 on GA media
These are all security issues fixed in the strongswan-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 8 : ELSA-2026-64823-0: / redis:6 (ELSA-2026-648230)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648230 advisory. 6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373 Tenable has...
Fedora 44 : GitPython (2026-1cb04a54d8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1cb04a54d8 advisory. Update to 3.1.62 close RHBZ2529282 - Fixes GHSA-hmq2-w58f-27jc Tenable has extracted the preceding description block directly from the Fedora security...
Oracle Linux 9 : ELSA-2026-66179-0: / perl-DBI (ELSA-2026-661790)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-661790 advisory. 1.643-9.5 - Use Module::Load for safer package loading in DBI::Profile CVE-2026-19546 Related: RHEL-236831 Tenable has extracted the preceding description blo...
OPENSUSE-SU-2026:11743-1 google-osconfig-agent-20260908.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-WCJJ-9M6G-2FR2 functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import Summary The setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string, interpolates it directly into an npm package specifier functype@, and installs it via pnpm add without any...
NPM: functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
NPM: functype-mcp-server: MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import vulnerability discovered by ? in WordPress Npm functype-mcp-server versions = 1.4.3...
functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import Summary The setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string, interpolates it directly into an npm package specifier functype@, and installs it via pnpm add without any...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hugo: hugo-0.166.0-0.1.hum1 aarch64, x8664 hugo-0.166.0-0.1.hum1.src src...
Malicious code in @nexustechpro/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e10f9b682c7a34a63468b31a47d982a98bf6d0308b5dbe96b0df7bdb51fdd6 @nexustechpro/baileys is a fork of the Baileys WhatsApp library in which lib/Socket/chats.js 270 KB is transformed with obfuscator.io large...
Malicious code in @neroxkira/vangal-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...
MAL-2026-16105 Malicious code in @sahril2nd/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2089d9678322dc8adbf5e6e740c29d6720133df3489970652a2100641435e This package is a fork of the Baileys WhatsApp library that embeds a hardcoded network destination hidden as a String.fromCharCode... decimal-ASCII...
Malicious code in @auction-fe/ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383eb0003b48f9a03fefc5a97f9a4b4a2c7756fa1cbced8995bb05838ff404f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @auction-fe/reporting-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @auction-fe/base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4430765bbffe0f1b4471a3d1dbafdbc97059e7717fc6a1967fd5ebf05b83a0ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16106 Malicious code in @auction-fe/base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4430765bbffe0f1b4471a3d1dbafdbc97059e7717fc6a1967fd5ebf05b83a0ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16107 Malicious code in @auction-fe/portal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9a0273cadda58738fa01d0c67fb17edd588f5870a13128a4aa47820f6a13fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16109 Malicious code in @auction-fe/ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383eb0003b48f9a03fefc5a97f9a4b4a2c7756fa1cbced8995bb05838ff404f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @auction-fe/portal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9a0273cadda58738fa01d0c67fb17edd588f5870a13128a4aa47820f6a13fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
