193739 matches found
Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages
Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk...
CVE-2026-4360 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-0864 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11972 vulnerabilities
Vulnerabilities for packages: python...
GHSA-GF2W-JQMQ-FCM8 vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, code-server, opensearch-dashboards-fips, saf, graalvm, lerna, opensearch-dashboards, actions-runner, homepage, npm, prism, gitlab-rails-ce-fips, sqlpad, wazuh-dashboard, kubeflow-centraldashboard, kibana, pulumi, wazuh-dashboard-fips...
CVE-2026-4360 vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11940 vulnerabilities
Vulnerabilities for packages: python...
RHSA-2026:39022 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the...
subdependancy-packages-approuter (0.0.1) potentially affected by CVE-2026-27690 via @sap/approuter (20.8.3)
@sap/approuter NPM version 20.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/approuter and may be impacted: - subdependancy-packages-approuter 0.0.1 Source cves: CVE-2026-27690 Source advisory: OSV:GHSA-8M85-WQG7-C529...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +30 more potentially affected by CVE-2026-62188 via openclaw (>=2026.3.22, <=2026.6.6)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62188 Source advisory: SNYK:JS-OPENCLAW-17966765...
@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +29 more potentially affected by CVE-2026-62199 via openclaw (>=2026.3.22, <=2026.6.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =1.1.50, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =2026.4.3-2 and more Source cves: CVE-2026-62199 Source advisory: SNYK:JS-OPENCLAW-17966762...
RockyLinux 9 : xorg-x11-server (RLSA-2026:38486)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38486 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...
RockyLinux 10 : perl-DBI (RLSA-2026:38513)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38513 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...
