606894 matches found
Malicious code in map-streak-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80727943437a7e22116b369c010fc965c4854a0c58a053504c4bc55555e90dd4 On import, dist/index.mjs chmods 0755 and spawns the bundled Linux x8664 binary dist/internal/calc-math.dat as a detached background process. The...
Fedora 43 : erlang (2026-4220305a93)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4220305a93 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Fedora 44 : erlang (2026-7a3db128e8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a3db128e8 advisory. CVE-2026-55953 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Linux Distros Unpatched Vulnerability : CVE-2026-71870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-50159 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-2V8P-3F2J-5MP7 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-C4C3-PG64-4M4V vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-6X64-9X62-F2GX vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-3RRR-JR9J-H3Q3 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-RHH3-JPG6-66XH vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2026-71437 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2026-71438 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: zipkin, infinispan, dependency-track, apicurio-registry...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: zipkin, infinispan, dependency-track, apicurio-registry...
EUVD-2025-27054
Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed i...
EUVD-2026-44768
jsii-diff: Command Injection via npm: package argument...
MAL-2026-13678 Malicious code in svelte-map-visual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6454f69cbd9ee5dce9ba329c1c395a782bc495299a6eeec26455451416f7f37 No malicious behavior was identified in this package version. No lifecycle scripts fetching or executing remote content, no credential or...
Malicious code in svelte-map-visual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6454f69cbd9ee5dce9ba329c1c395a782bc495299a6eeec26455451416f7f37 No malicious behavior was identified in this package version. No lifecycle scripts fetching or executing remote content, no credential or...