629290 matches found
CLSA-2026-1788853239 TuxCare security update for com.jayway.jsonpath (1 CVE)
TuxCare rebuilt 3 com.jayway.jsonpath packages to address 1 CVE. Fixed in 2.8.0-tuxcare.1...
Security update for python
This update for python fixes the following issues: Security issues fixed: CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl Patch Instructions: To install this SUSE upda...
SUSE-SU-2026:4061-1 Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl Patch Instructions: To install this SUSE update u...
SUSE-SU-2026:4060-1 Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...
Malicious code in @web2apk/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16043 Malicious code in @web2apk/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in krdpass-auth-react-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...
MAL-2026-16042 Malicious code in krdpass-auth-react-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...
Updated freerdp packages fix security vulnerabilities
Updated packages bring lot of security fixes. Please see the links for additional information...
MGASA-2026-0383 Updated freerdp packages fix security vulnerabilities
Updated packages bring lot of security fixes. Please see the links for additional information...
CLEANSTART-2026-FT20664 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-AJ39907 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-AE16267 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CVE-2026-82710
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...
[SECURITY] Fedora 44 Update: chirp-0.4.0^20260828-1.fc44
Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...
[SECURITY] Fedora 43 Update: perl-Net-OAuth-0.33-1.fc43
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
CLEANSTART-2026-ID18571 brace-expansion through 5
Multiple security vulnerabilities affect the npm package. brace-expansion through 5. See references for individual vulnerability details...
CLEANSTART-2026-GV17876 Helm is a package manager for Charts for Kubernetes
Multiple security vulnerabilities affect the rancher-fleet-agent package. Helm is a package manager for Charts for Kubernetes. See references for individual vulnerability details...
CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...