196239 matches found
MAL-2026-11910 Malicious code in @servicetitan/onboarding-ui (npm)
npm/@servicetitan/onboarding-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
RLSA-2026:49607 Important: frr10 security, bug fix, and enhancement update
FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga...
frr10 security, bug fix, and enhancement update
An update is available for frr10. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It take...
analogic-framework (4.1.102), app-reviews (>=0.1.0, <=0.4.0) +55 more potentially affected by CVE-2026-69248 via cryptography (46.0.6)
cryptography PYPI version 46.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - analogic-framework 4.1.102 - app-reviews =0.1.0, =0.13.35, =26.8.1, =26.8.1, =1.0.962, =1.1.0.dev20260326020353, =2.1.8rc4, =5.9.5,...
PYSEC-2026-3551 AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
Summary The AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...
Malicious Package
Overview psbt-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-11964 Malicious code in cacheable-request (npm)
npm/cacheable-request version 13.0.20 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases throug...
RHSA-2026:49401 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
PT-2026-75255
TuxCare rebuilt 17 @angular packages to address 18 CVEs. Fixed in 13.3.11-tuxcare.1...
PT-2026-74906
TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 13.3.12-tuxcare.1...
PT-2026-74588
TuxCare rebuilt 39 packages to address 2 CVEs. Fixed in 9.0.100-tuxcare.6...
PT-2026-75080
TuxCare rebuilt 19 @angular packages to address 1 CVE. Fixed in 7.2.1-tuxcare.2...
PT-2026-75283
TuxCare rebuilt 20 @angular packages to address 1 CVE. Fixed in 9.1.13-tuxcare.11...
PT-2026-75286
TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 11.2.14-tuxcare.8...
PT-2026-73726
TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.90-tuxcare.2...
PT-2026-73924
TuxCare rebuilt 38 packages to address 23 CVEs. Fixed in 9.0.46-tuxcare.1...
PT-2026-75302
TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 14.2.8-tuxcare.3...