630007 matches found
Updated tomcat packages fix security vulnerabilities
Incorrect URL decoding in RewriteValve may allow security control bypass. CVE-2026-59083 EncryptInterceptor requirements not clearly documented. CVE-2026-59084 DoS via WebSocket chat example. CVE-2026-66299 Bypass longest prefix security constraint. CVE-2026-65182 TOCTOU when setting specific...
Security Bulletin: Vulnerability in cryptography affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in cryptography has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
NPM: CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes
NPM: CodeWhale: imageanalyze follows workspace symlinks, leaking external file bytes vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...
CLSA-2026-1788536930 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 26 org.springframework packages to address 1 CVE. Fixed in 6.1.4-tuxcare.5...
fabric-spark-custom-wheel-poc
Microsoft Fabric Spark custom-wheel POC !CIhttps://github...
Malicious code in olympuslib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcee7d29dcf5e9c04cc3528403c15c3359c6701eaf42f54ecaa2ac4c29a4b3c Top-level init.py invokes a canary routine on import that serializes the entire os.environ dictionary along with socket.gethostname and package...
MAL-2026-15929 Malicious code in pymaas (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d07b21485fb1007b5cca6c07b48620d235200b19dd62e8d6018d019ec5557dc On import pymaas, top-level code in the package invokes a canary function that collects the entire os.environ dictionary and socket.gethostname,...
GHSA-MHC4-G3WH-CW7M vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2026-65959 vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2026-65959 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-MHC4-G3WH-CW7M vulnerabilities
Vulnerabilities for packages: vitess...
Malicious code in @crysnovax/baileys-fixed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bca343c567c4a163c81912649019e99d22070a069b1c7e174a16659f6e41469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15944 Malicious code in @crysnovax/baileys-fixed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bca343c567c4a163c81912649019e99d22070a069b1c7e174a16659f6e41469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15946 Malicious code in @crysnovax/plug (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b242d3d1fc217775fa550cf39213eba711b3fd758f5ac0f077a3a33af631eed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @crysnovax/baileys-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5170cdafff4affcf4669fed3b8df209d4c1f5305b368ef5e591b23035f3e041d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @crysnovax/plug (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b242d3d1fc217775fa550cf39213eba711b3fd758f5ac0f077a3a33af631eed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15945 Malicious code in @crysnovax/baileys-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5170cdafff4affcf4669fed3b8df209d4c1f5305b368ef5e591b23035f3e041d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2026:59830 Red Hat Security Advisory: OpenShift Container Platform 4.12.97 packages and security update
Bulletin has no description...