GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: saf, actions-runner, sqlpad, wazuh-dashboard-fips, opensearch-dashboards, npm, code-server, gitlab-rails-ce-fips, prism, homepage, graalvm, lerna, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, pulumi, kibana, wazuh-dashboard...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: saf, actions-runner, sqlpad, wazuh-dashboard-fips, opensearch-dashboards, npm, code-server, gitlab-rails-ce-fips, prism, homepage, graalvm, lerna, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, pulumi, kibana, wazuh-dashboard...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: saf, actions-runner, sqlpad, wazuh-dashboard-fips, opensearch-dashboards, npm, code-server, gitlab-rails-ce-fips, prism, homepage, graalvm, lerna, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, pulumi, kibana, wazuh-dashboard...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: saf, actions-runner, sqlpad, wazuh-dashboard-fips, opensearch-dashboards, npm, code-server, gitlab-rails-ce-fips, prism, pulumi, graalvm, lerna, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, kibana, wazuh-dashboard...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: prism, lerna, pulumi, kubeflow-centraldashboard, npm, saf, sqlpad, code-server...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: prism, lerna, pulumi, kubeflow-centraldashboard, npm, saf, sqlpad, code-server...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: prism, lerna, pulumi, kubeflow-centraldashboard, npm, saf, sqlpad, code-server...

Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

MAL-2026-10989 Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.1) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.1 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...

Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...

MAL-2026-10987 Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...

ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10843 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-44001 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10689 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47137 CVE-2026-47137 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-47137 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-26956 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...