Improper Check for Dropped Privileges

Overview sh is a Python subprocess replacement Affected versions of this package are vulnerable to Improper Check for Dropped Privileges in the uid process. An attacker can gain unauthorized access to files or resources associated with privileged supplementary groups by launching a subprocess fro...

CVE-2026-13221 vulnerabilities

Vulnerabilities for packages: perl...

GHSA-5G35-5JRJ-F39P vulnerabilities

Vulnerabilities for packages: perl...

GHSA-6GFG-HH9C-WX87 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15764 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FFVP-VXW4-JCM4 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15769 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GC92-VPV6-2C4W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PH5F-PJVP-H9X6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-25XW-CF43-5CCV vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15770 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15777 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FVWF-CX56-8X5C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MC7H-7X47-9J48 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5CVC-PM9V-PW7P vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QPX7-R6J6-CQF3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-36HH-V3QG-5JQ4 vulnerabilities

Vulnerabilities for packages: py3-xet-core...

Security update for joe

This update for joe fixes the following issue CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

MAL-2026-10770 Malicious code in govpkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc7609ef2380436c805298b1d10362d361ea93b448db92433e3e69cc2de8ed8 Every public API function in govpkg get, package, module invokes a helper named normalizeHelper that downloads an unpinned, unverified binary from th...

Malicious code in n8n-nodes-final-mile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c87dad5030c245317bd34041521d73d8c112d79018db381d749c80739d539f The package advertises itself as a community utility node for n8n but its declared main index.js is a self-executing IIFE that runs the moment n8n...