612527 matches found
Malicious code in mrmustard (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535679eb30bfd0600dc07e44d2e649c88ecb6274364e2ba0b1ef2ccc05976727 On plain import mrmustard, the top-level init.py spawns a background thread that reads /.ssh/ private keys, /.aws/credentials, /.aws/config,...
31g-form-parser (1.0.107), @aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5) +444 more potentially affected by CVE-2026-55685 via react-router (>=7.0.0, <=7.17.0)
react-router NPM version =7.0.0, =1.0.0, =1.0.1, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves: CVE-2026-55685 Source advisory: OSV:GHSA-CHX6-HX7R-MCP5...
31g-form-parser (1.0.107), @aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5) +444 more potentially affected by CVE-2026-55685 via react-router (>=7.0.0, <=7.17.0)
react-router NPM version =7.0.0, =1.0.0, =1.0.1, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source cves: CVE-2026-55685 Source advisory:...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +174 more potentially affected by CVE-2026-55575 via liquidjs (>=10.2.0, <=10.27.0)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.0.4 and more Source cves: CVE-2026-55575 Source advisory: OSV:GHSA-G357-X5C3-C72P...
@depup/electron-builder (26.8.1-depup.0), @lynx-js/lynxtron-builder (>=0.0.1-alpha.0, <=0.0.10) +8 more potentially affected by CVE-2026-54672 via app-builder-lib (>=26.0.0-alpha.0, <=26.14.0)
app-builder-lib NPM version =26.0.0-alpha.0, =0.0.1-alpha.0, =26.8.2-beta.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.0.0-alpha.0, =26.14.0 Source cves: CVE-2026-54672 Source advisory: OSV:GHSA-7G7R-GX96-252G...
ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-18218 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)
org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-18218 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752084...
OESA-2026-3099 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This vulnerability is classified as critical and could affect...
Malicious code in intel-cicd-repo-infrastructure (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-11046 Malicious code in intel-cicd-repo-infrastructure (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.3: rabbitmq-server4.3-4.3.4-0.1.hum1 aarch64, x8664 rabbitmq-server4.3-4.3.4-0.1.hum1.src src...
Malicious code in karpatkey (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c On import karpatkey, the top-level karpatkey/init.py spawns a daemon background thread that walks the installer's home directory and collects SSH...
MAL-2026-11047 Malicious code in karpatkey (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c On import karpatkey, the top-level karpatkey/init.py spawns a daemon background thread that walks the installer's home directory and collects SSH...
GHSA-G7HG-VRCF-MVMR vulnerabilities
Vulnerabilities for packages: seata, management-api-for-apache-cassandra-5.0, pinot-fips, hadoop-fips, cassandra-fips, apache-hop-fips, tez, cassandra, pinot, thingsboard, apache-hop...
GHSA-WC96-39FC-566F vulnerabilities
Vulnerabilities for packages: seata, management-api-for-apache-cassandra-5.0, pinot-fips, hadoop-fips, cassandra-fips, apache-hop-fips, tez, cassandra, pinot, thingsboard, apache-hop...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: seata, management-api-for-apache-cassandra-5.0, pinot-fips, hadoop-fips, cassandra-fips, apache-hop-fips, tez, cassandra, pinot, thingsboard, apache-hop...
GHSA-7P3P-8QV8-M2VH vulnerabilities
Vulnerabilities for packages: apache-tika-fips, kafka, spark-fips, reposilite, traccar-fips, cruise-control, solr, akhq, spark-kubernetes-operator, strimzi-kafka-operator, traccar, apache-tika, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips,...
CVE-2026-50289 vulnerabilities
Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...
GHSA-5XPP-75JX-M839 vulnerabilities
Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...
