630004 matches found
CVE-2026-81724 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-8X48-8G7J-RQXP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-CV22-G7MW-8V73 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-VP2X-QP44-57V7 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-72818 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-81727 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-M4RF-3FR8-XWX3 vulnerabilities
Vulnerabilities for packages: open-webui...
MAL-2026-15932 Malicious code in chartkit-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 888ecdd39e3a032c1b16877250049ae7f99e7eb523c5a55ae2c06080c343da97 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CLSA-2026-1788550289 TuxCare security update for 40 packages (4 CVEs)
TuxCare rebuilt 40 packages to address 4 CVEs. Fixed in 10.1.42-tuxcare.9...
MAL-2026-16004 Malicious code in ulid-intel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cde9990177f51fd4637a17f48d850c61f3ade933fe3fce078d5846125a5fa01 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in ulid-intel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cde9990177f51fd4637a17f48d850c61f3ade933fe3fce078d5846125a5fa01 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in metricboxlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a511a75c8c42dcd677dd3814265d3befefa7f339bdc6b0336788635813e837 MetricBoxLite 1.0 collects the installer's username getpass.getuser and hostname socket.gethostname, JSON-encodes them, and POSTs the payload to a...
DEBIAN-CVE-2026-80910
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...
NPM: CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository
NPM: CodeWhale: Project config allowshell override enables arbitrary shell command execution via cloned repository vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.6, 0.8.41...
NPM: CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)
NPM: CodeWhale: rlmeval auto-approves arbitrary Python execution, bypassing the user's approval policy RCE vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...
NPM: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)
NPM: CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...
NPM: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)
NPM: CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.3.10, 0.8.41...
NPM: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
NPM: CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...
Updated tomcat packages fix security vulnerabilities
Incorrect URL decoding in RewriteValve may allow security control bypass. CVE-2026-59083 EncryptInterceptor requirements not clearly documented. CVE-2026-59084 DoS via WebSocket chat example. CVE-2026-66299 Bypass longest prefix security constraint. CVE-2026-65182 TOCTOU when setting specific...
Security Bulletin: Vulnerability in cryptography affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in cryptography has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...