607238 matches found
MAL-2026-13559 Malicious code in dolyame-ui-collapseblock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9992e81f3de4cb9bd4391466d7850e953c19a0772ebbe5992953044466377c On require, shim.js fetches an OS/architecture-specific native binary from hardcoded Cloudflare Workers hosts oob-worker.cf100-416.workers.dev,...
Malicious code in dolyame-ui-inputrange (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae096235cf72db7f2e9908e53fa5a6e7c87718539a9e3452e0e34f7345ca80f On require of dolyame-ui-inputrange, init.js reconstructs a rotating list of Cloudflare Workers hostnames via split-string joins e.g...
ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root
Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-APP-MAVEN-GHSA-R7WM-3CXJ-WFF9 GHSA-r7wm-3cxj-wff9 in com.fasterxml.jackson.core:jackson-core - Patched by Root
Root has patched GHSA-r7wm-3cxj-wff9 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-15308 CVE-2026-15308 in python3.9 - Patched by Root
Root has patched CVE-2026-15308 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-1502 CVE-2026-1502 in python3.9 - Patched by Root
Root has patched CVE-2026-1502 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27979 CVE-2026-27979 in next - Patched by Root
Root has patched CVE-2026-27979 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27980 CVE-2026-27980 in next - Patched by Root
Root has patched CVE-2026-27980 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-29057 CVE-2026-29057 in next - Patched by Root
Root has patched CVE-2026-29057 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27977 CVE-2026-27977 in next - Patched by Root
Root has patched CVE-2026-27977 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-5889 CVE-2025-5889 in brace-expansion - Patched by Root
Root has patched CVE-2025-5889 in the brace-expansion package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in pypdf - Patched by Root
Root has patched CVE-2026-27026 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28351 CVE-2026-28351 in pypdf - Patched by Root
Root has patched CVE-2026-28351 in the pypdf package for Root:PyPI. Multiple fixed versions available...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-41187 vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-12261
A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...
Malicious code in fastapii (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf67e733322de0ce3d08269697e6ccd9460233319cadd5f97f05c8d1e855665a fastapii 0.1.2 is a single-character typosquat of the popular fastapi package. Its setup.py registers a custom setuptools install cmdclass LinuxInsta...