@0xwork/connect (0.1.8), @openclaw/kitchen-sink (0.2.6) potentially affected by CVE-2026-62221 via openclaw (>=2026.5.20, <=2026.5.24-beta.2)

openclaw NPM version =2026.5.20, =2026.5.24-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @0xwork/connect 0.1.8 - @openclaw/kitchen-sink 0.2.6 Source cves: CVE-2026-62221 Source advisory: SNYK:JS-OPENCLAW-180178...

@0xwork/connect (0.1.8), @openclaw/kitchen-sink (0.2.6) potentially affected by CVE-2026-62217 via openclaw (>=2026.5.20, <=2026.5.24-beta.2)

openclaw NPM version =2026.5.20, =2026.5.24-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @0xwork/connect 0.1.8 - @openclaw/kitchen-sink 0.2.6 Source cves: CVE-2026-62217 Source advisory: SNYK:JS-OPENCLAW-180178...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62220 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62220 Source advisory: SNYK:JS-OPENCLAW-18017834...

@0xwork/connect (>=0.1.0, <=0.1.8), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62218 via openclaw (>=2026.3.22, <=2026.5.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62218 Source advisory: SNYK:JS-OPENCLAW-18017833...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62224 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62224 Source advisory: SNYK:JS-OPENCLAW-18017831...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62223 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62223 Source advisory: SNYK:JS-OPENCLAW-18017828...

@0xwork/connect (>=0.1.0, <=0.1.7), @chrysb/alphaclaw (>=0.8.3, <=0.9.16) +16 more potentially affected by CVE-2026-62226 via openclaw (>=2026.3.28, <=2026.5.7)

openclaw NPM version =2026.3.28, =0.1.0, =0.8.3, =0.1.0, =2.2.4, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =0.1.0, =0.2.10-beta.0, =0.1.38, =0.0.1, =0.3.0 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-62226 Source advisory: SNYK:JS-OPENCLAW-18017827...

@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-62228 via openclaw (>=2026.3.22, <=2026.6.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62228 Source advisory: SNYK:JS-OPENCLAW-18017821...

Oracle Linux 10 : delve (ELSA-2026-23102)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-23102 advisory. 1.26.1-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-2 - Bump Tenable has extracted the preceding description block direct...

php:8.2 security, bug fix, and enhancement update

php 8.2.32-1 - rebase to 8.2.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 2.0.3-2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz1971065...

Oracle Linux 10 : yggdrasil-worker-package-manager (ELSA-2026-25999)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-25999 advisory. 0.2.3-7 - Bump release for rebuild 0.2.3-6 - Bump release for rebuild Tenable has extracted the preceding description block directly from the Oracle Linux...

OPENSUSE-SU-2026:11292-1 helm3-3.21.3-2.1 on GA media

These are all security issues fixed in the helm3-3.21.3-2.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : samba (ELSA-2026-22963)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22963 advisory. - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933...

Oracle Linux 10 : valkey (ELSA-2026-25216)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25216 advisory. 8.0.9-1 - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 Tenable has extracted the preceding description block directly from the...

OPENSUSE-SU-2026:11297-1 oras-1.3.3-2.1 on GA media

These are all security issues fixed in the oras-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : perl-DBI (2026-71d7e4d1da)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-71d7e4d1da advisory. 1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380 Tenable has extracted the preceding description block directly from the Fedora...

OPENSUSE-SU-2026:11303-1 wget-1.25.0-4.1 on GA media

These are all security issues fixed in the wget-1.25.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11293-1 joe-4.6-4.1 on GA media

These are all security issues fixed in the joe-4.6-4.1 package on the GA media of openSUSE Tumbleweed...

@nohost/server (>=0.0.1-beta2, <=0.3.6) potentially affected by CVE-2026-55629 via whistle (>=2.3.7, <=2.9.85-beta)

whistle NPM version =2.3.7, =0.0.1-beta2, =0.3.6 Source cves: CVE-2026-55629 Source advisory: SNYK:JS-WHISTLE-18601847...

Malicious code in my-tailwind-gutenberg-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba41c0d8f447e47febb6ceed2c87681bb0f518b74d42d898e024a7ab4418f61 The package advertises itself as a WordPress Gutenberg + Tailwind block scaffold src/edit.js, src/save.js, block.json, but the tarball also contains...