CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

GHSA-9MC4-RQMQ-H467 vulnerabilities

Vulnerabilities for packages: python...

GHSA-GF2W-JQMQ-FCM8 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-59871 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, code-server, gitlab-rails-ce-fips, kibana, prism, pulumi, wazuh-dashboard-fips, opensearch-dashboards, kubeflow-centraldashboard, tensorflow-gpu-jupyter, actions-runner, homepage, opensearch-dashboards-fips, sqlpad, wazuh-dashboard, lerna, saf,...

CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

GHSA-G345-7JG6-M22P vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11940 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-59674

A flaw was found in suricata. This vulnerability, related to improper handling of symbolic links, allows a local suricata user to escalate their privileges to root. By exploiting this, an attacker could gain full control over the affected system. Mitigation No mitigation is necessary for Red Hat'...

M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions

Detect and mitigate malicious @asyncapi npm packages linked to the latest npm supply chain attack...

RHSA-2026:39022 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

The serpent’s tongue: Luring the Python out of its den

Python's popularity, readable syntax, and extensive third-party library ecosystem make it an attractive target for threat actors seeking to compromise developer devices and infrastructure. Malicious packages and supply-chain attacks are increasingly common, exploiting the trust built into Python'...

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the...

subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)

@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: OSV:GHSA-8M85-WQG7-C529...

subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)

@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: GHSA-8M85-WQG7-C529...

subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)

@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: SNYK:JS-SAPAPPROUTER-20158394...

RockyLinux 9 : perl-DBI (RLSA-2026:38512)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38512 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

RockyLinux 10 : perl-DBI (RLSA-2026:38513)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38513 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1252:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1252:01 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the MiracleLinux...

RockyLinux 9 : xorg-x11-server (RLSA-2026:38486)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38486 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...

PT-2026-58901

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...