193623 matches found
Astra Linux – Vulnerability in dpkg
In dpkg, the Debian package management system, versions prior to 1.21.8, 1.20.10, 1.19.8, and 1.18.26 are vulnerable to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include debian.tar, the in-place extraction process may...
PT-2026-81026
Name of the Vulnerable Software and Affected Versions hex.pm versions 2025-10-10 through 2026-08-23 Description An insufficient session expiration issue exists in the OAuth token refresh grant. The expand repositories scope/3 function in lib/hexpm/permissions.ex only rewrites the literal...
CVE-2026-41732
CVE-2026-41732...
CVE-2026-73566 vulnerabilities
Vulnerabilities for packages: node-gyp, opensearch-dashboards, npm, renovate, sqlpad, prism, saf, lerna, pulumi, kubeflow-centraldashboard, code-server...
RHSA-2026:58474 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +176 more potentially affected by CVE-2026-69222 via liquidjs (>=10.2.0, <=10.27.1)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.4.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.19 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-69222 Source advisory:...
a-data-processing (0.0.1), a2a-client-handler (0.1.0) +2041 more potentially affected by CVE-2026-72848 via langchain-community (>=0.0.1, <=1.0.0a1)
langchain-community PYPI version =0.0.1, =0.1.0, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0, =4.8.2, =0.1.3, =0.1.0, =1.0.1, =0.1.0, =0.1.0, =3.2.0, =3.4.0 and more Source cves: CVE-2026-72848 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-19233333...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77415 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77415 Source advisory: OSV:GHSA-66MM-25PP-RFFF...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77414 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77414 Source advisory: OSV:GHSA-2943-5XFG-GQ5F...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77414 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77414 Source advisory: SNYK:JS-JSONATA-1923333...
@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +342 more potentially affected by CVE-2026-77413 via jsonata (>=1.0.10, <=1.8.7)
jsonata NPM version =1.0.10, =0.0.1, =0.0.1, =0.0.1, =0.17.5, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.0.1, =0.8.0, =0.0.1, =0.0.114 and more Source cves: CVE-2026-77413 Source advisory: OSV:GHSA-8GQ3-VP5J-2GRP...
@activepieces/piece-json (>=0.1.6, <=0.1.7), @autexis/node-red-context-redis (>=1.0.0-rc1, <=1.0.1) +162 more potentially affected by CVE-2026-77413 via jsonata (>=2.0.0, <=2.1.0)
jsonata NPM version =2.0.0, =0.1.6, =1.0.0-rc1, =5.0.0, =0.0.1, =2.3.132, =37.301.2, =1.0.4, =11.8.0, =0.3.0, =0.1.0, =1.0.0, =2.33.3-6623e55-202608121503.0, =2.7.1-7dd573e-202408290941.0, =2.32.1-fc1b7da-202607021428.0 and more Source cves: CVE-2026-77413 Source advisory: SNYK:JS-JSONATA-1923333...
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence AI-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates the bundled binary,...
CLSA-2026-1787333890 TuxCare security update for io.netty (61 CVEs)
TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.108.Final-tuxcare.1...
GHSA-J2G6-362Q-6QC6 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-gcp, velero-plugin-for-aws-fips, velero-plugin-for-aws, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure, velero-plugin-for-microsoft-azure-fips...
CLSA-2026-1787292931 TuxCare security update for io.projectreactor.netty (2 CVEs)
TuxCare rebuilt 4 io.projectreactor.netty packages to address 2 CVEs. Fixed in 1.1.31-tuxcare.1...
@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54156 via node-opcua (>=2.1.9, <=2.165.2)
node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...
@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)
node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...