199252 matches found
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...
GHSA-QWWW-VCR4-C8H2 vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2026-47021 vulnerabilities
Vulnerabilities for packages: openjdk...
Important: Red Hat Security Advisory: frr10 security, bug fix, and enhancement update
An update for frr10 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
EUVD-2026-51849
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
CVE-2026-67338
CVE-2026-67338 affects JupyterLab prior to 4.5.9. A stored cross-site scripting vulnerability resides in the Extension Manager where URI protocols in package metadata URLs are not validated. This allows an attacker to publish malicious PyPI packages with javascript: URLs in project metadata, enab...
RHSA-2026:42125 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-62941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - incus - None CVE-2026-62941 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...
openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21492-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21492-1 advisory. Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels Tenable has extracted the preceding description block...
GHSA-FJR4-X663-MWXC vulnerabilities
Vulnerabilities for packages: mlflow...
CVE-2026-55685 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-H8FP-F39C-Q6MH vulnerabilities
Vulnerabilities for packages: vitess...
MAL-2026-11418 Malicious code in catalogai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ebd7348ccf6d30158d05df90e15ebba938c30119c83b2ce6679cd69068dc667b In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while...
RHSA-2026:48799 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:48780 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:48788 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:48482 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...