CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14

CVE-2026-6100 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14

CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...

ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root

Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-FWG2-594C-JP42 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-71852 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root

Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...

GHSA-JM78-9FVV-MHGR vulnerabilities

Vulnerabilities for packages: checkov, opal...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-4GMW-GG2M-W46P vulnerabilities

Vulnerabilities for packages: checkov...

OPENSUSE-SU-2026:11473-1 dhcpcd-10.5.0-1.1 on GA media

These are all security issues fixed in the dhcpcd-10.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-17510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in printattribute via a zero length BMPSTRING attribute. printattribute...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-P9JM-Q85P-7MCP vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: dotstatsuite-supercore, json-server, gitlab-rails-ce, unleash-fips, renovate, langfuse-fips, langfuse, nextcloud-server, arangodb, unleash, jitsucom-jitsu...

Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56afa18eac7769497f21431af2a739dd5040563541223e41786746e0c44957a2 Package contains 2 files with no static or behavioral indicators of supply-chain attack shapes. No lifecycle scripts fetching remote content, no...