CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root

Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-FWG2-594C-JP42 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-71852 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root

Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...

GHSA-JM78-9FVV-MHGR vulnerabilities

Vulnerabilities for packages: opal, checkov...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-4GMW-GG2M-W46P vulnerabilities

Vulnerabilities for packages: checkov...

OPENSUSE-SU-2026:11473-1 dhcpcd-10.5.0-1.1 on GA media

These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-P9JM-Q85P-7MCP vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, langfuse, json-server, unleash, unleash-fips, dotstatsuite-supercore, langfuse-fips, arangodb, renovate, nextcloud-server, jitsucom-jitsu...

MAL-2026-13675 Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbd4923fdddd3bf528bfd2bc560ffe7963b22ed9df844e60f6fe2f778f15720 Package [email protected] contains only two files and shows no code performing credential access, network...

MAL-2026-13671 Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd82004d1cbf2e4b6a3c77f48293b0d9638fe59592eb40291b6a332121f6fe6 Package contains no code paths that read installer secrets, fetch and execute remote content, relay caller data to third-party destinations, or...

MAL-2026-13674 Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56afa18eac7769497f21431af2a739dd5040563541223e41786746e0c44957a2 Package contains 2 files with no static or behavioral indicators of supply-chain attack shapes. No lifecycle scripts fetching remote content, no...