NPM: xmldom: Quadratic-memory consumption

NPM: xmldom: Quadratic-memory consumption vulnerability discovered by ? in WordPress Npm xmldom versions = 0.1.5, = 0.6.0...

NPM: joi: Prototype pollution via a `__proto__` language key in custom messages

NPM: joi: Prototype pollution via a proto language key in custom messages vulnerability discovered by ? in WordPress Npm joi versions = 17.2.0, 17.13.6...

CVE-2026-53606 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook...

GHSA-JXWJ-J7WR-GFRW vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook...

CVE-2026-71211 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

CVE-2021-42550 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-3J55-QF57-HQC2 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-75803 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-54874 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63073 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63075 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-WP5F-6Q39-Q2F4 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-9856 vulnerabilities

Vulnerabilities for packages: open-webui...

NPM: Colord: Slow rejection of oversized malformed color strings

NPM: Colord: Slow rejection of oversized malformed color strings vulnerability discovered by ? in WordPress Npm colord versions 2.9.4...

NPM: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

NPM: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers vulnerability discovered by ? in WordPress Npm next versions = 13.4.0, 15.5.24...

NPM: joi: object().rename() with a template target can set the validated object's prototype

NPM: joi: object.rename with a template target can set the validated object's prototype vulnerability discovered by ? in WordPress Npm joi versions = 16.0.0, 17.13.5...

NPM: MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

NPM: MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize via Live NamedNodeMap Removal Skip vulnerability discovered by ? in WordPress Npm maplibre-gl versions = 6.4.0...

NPM: xmldom: Element name injection via createElement() bypasses requireWellFormed

NPM: xmldom: Element name injection via createElement bypasses requireWellFormed vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Build.Tasks.Git and Microsoft.SourceLink.AzureRepos.Git. This advisory also provides guidance on what developers can do to update their applications to remove this...

Malicious code in punypump (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...