MAL-2026-11056 Malicious code in gpaas-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f698d94fead72f888459a0773a7715dd974433c4624134b743098b61e74f9a9f On npm install, the package's preinstall script runs index.js which collects the installer's hostname, platform, architecture, home directory path, a...

MAL-2026-11059 Malicious code in pp-react-ui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee26042aed9ed8c50ffaa9b8fd40df265099c14441c38542bbfce3c529ceef3 Analysis of [email protected] 4 files surfaced no behaviors matching supply-chain attack classes: no lifecycle scripts fetching or executing remote...

Malicious code in pp-react-ui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee26042aed9ed8c50ffaa9b8fd40df265099c14441c38542bbfce3c529ceef3 Analysis of [email protected] 4 files surfaced no behaviors matching supply-chain attack classes: no lifecycle scripts fetching or executing remote...

Malicious code in payoutsvettingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27087d7e447aae7f5009468024ead0904a706c36775c9a132b43bbcd47d3993c [email protected] declares preinstall: node index.js in package.json, causing index.js to run automatically on npm install. The script...

MAL-2026-11058 Malicious code in payoutsvettingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27087d7e447aae7f5009468024ead0904a706c36775c9a132b43bbcd47d3993c [email protected] declares preinstall: node index.js in package.json, causing index.js to run automatically on npm install. The script...

GHSA-4QHR-G3C6-FCFX vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, thingsboard, celeborn...

MAL-2026-11055 Malicious code in fundraiserservicepp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356b654b692d4c1222f3dc31dcfad683a6e193a41484d3c617c7c8d52db2313 On npm install, the package's preinstall lifecycle executes index.js which collects os.hostname, os.platform, and os.arch and POSTs them as JSON over...

Malicious code in fundraiserservicepp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356b654b692d4c1222f3dc31dcfad683a6e193a41484d3c617c7c8d52db2313 On npm install, the package's preinstall lifecycle executes index.js which collects os.hostname, os.platform, and os.arch and POSTs them as JSON over...

Infinite loop on invalid input in golang.org/x/text

...

CVE-2026-56817 vulnerabilities

Vulnerabilities for packages: pinot, seata, tez, celeborn, apache-hop-fips, pinot-fips, thingsboard, hadoop-fips, management-api-for-apache-cassandra-5.0, apache-hop...

GHSA-88V5-9HXC-F85R vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-59888 vulnerabilities

Vulnerabilities for packages: opensearch, flyway, akhq, sonarqube, spark...

GHSA-3PJW-73GF-8QR5 vulnerabilities

Vulnerabilities for packages: opensearch, flyway, akhq, sonarqube, spark...

[SECURITY] Fedora 43 Update: sssd-2.12.0-3.fc43

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

Linux Distros Unpatched Vulnerability : CVE-2026-64452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no...

Linux Distros Unpatched Vulnerability : CVE-2026-64523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/handshake: Take a long-lived file reference at submit handshakenlacceptdoit needs the file pointer backing req-hrsk-sksocket to survive the window between...

Linux Distros Unpatched Vulnerability : CVE-2026-12547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via...

SUSE SLES12 Security Update : net-tools (SUSE-SU-2026:3222-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3222-1 advisory. - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-16397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153. CVE-2026-16397 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-64497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in...