611949 matches found
MAL-2026-11447 Malicious code in @peptide-packets/js-unimode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbac126c4dd058b5bbdeaf3b962acf9e6adce490c77b90545db33b97a878082 index.js in @peptide-packets/js-unimode exposes a listMods function that decodes a base64-encoded URL pointing to a GitHub gist owned by user...
CVE-2026-18157
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...
CVE-2026-18157
CVE-2026-18157 concerns the yggdrasil-worker-package-manager. A local attacker with existing system access can exploit an argument injection vulnerability in the APT backend, where specially crafted package names beginning with a hyphen are misinterpreted as apt-get options. Successful exploitati...
CVE-2026-18157 Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...
EUVD-2026-51380
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...
CVE-2026-18157 Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-ge...
GHSA-MMJF-RQRV-855V vulnerabilities
Vulnerabilities for packages: promitor, dotnet-bootstrap...
GHSA-724G-MXRG-4QVM vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-33V9-JFQ7-PMXC vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-96FG-W4M5-JGWC vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-XJFQ-6RHW-XJ37 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16393 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-727J-G2FH-46CV vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-FF33-VW52-C9P4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-M5J7-35RX-PHQ8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-WC2C-7F6V-VHF3 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-WQGP-6HGV-R9QF vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-G69W-566R-7R56 vulnerabilities
Vulnerabilities for packages: firefox...