GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sqlexporter, nvidia-container-toolkit, rancher-loglevel, azuredisk-csi, local-static-provisioner, fuse-overlayfs-snapshotter, crossplane-provider-aws-rds, x509-certificate-exporter, datadog-agent, kubernetes-event-exporter, newrelic-infra-operator, minio, tfsec,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: cloudbeat, k6-operator-fips, net-kourier-fips, ratify-fips, kubescape, portieris-fips, rabbitmq-cluster-operator, kubernetes-csi-driver-nfs-fips, mc, chaos-mesh-fips, contour-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-kubernetes,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: cloudbeat, k6-operator-fips, net-kourier-fips, ratify-fips, kubescape, portieris-fips, rabbitmq-cluster-operator, kubernetes-csi-driver-nfs-fips, mc, chaos-mesh-fips, contour-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-kubernetes,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: cloudbeat, k6-operator-fips, net-kourier-fips, kubescape, kubernetes-csi-driver-nfs-fips, mc, chaos-mesh-fips, contour-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-kubernetes, crossplane-provider-aws-cloudfront-fips, prometheus-stackdriver-exporter...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: solr, spark, cloudwatch-exporter, dependency-track, cassandra-reaper, druid, trino, zookeeper, kafka, apache-tika, confluent-kafka, akhq...

@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +21 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (>=0.0.0-dev-20240918082156, <=0.32.0)

@powersync/service-sync-rules NPM version =0.0.0-dev-20240918082156, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20250827072023, =0.0.0-dev-20260114113449, =0.0.0-dev-20250827072023, =0.0.0-dev.57b1a567,...

Linux Distros Unpatched Vulnerability : CVE-2026-2920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

EulerOS 2.0 SP13 : nasm (EulerOS-SA-2026-1254)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891.CVE-2023-31722 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-28687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-1940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but ...

Linux Distros Unpatched Vulnerability : CVE-2026-3086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

Linux Distros Unpatched Vulnerability : CVE-2025-69653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6...

CVE-2026-25041: Improper Neutralization of Special Elements used in an OS Command

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values database name, host, password, etc. without proper sanitization. The password and other...

Malicious code in demozecosse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1fd7840785d53d90edc61c6138072f4ed7a01b35dd05d76d9d6f5343ec93bff7 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

3extensions (1.0.1), @51jbs/incremental-coverage-plugin (1.0.5) +639 more potentially affected by CVE-2022-25912 +1 more via simple-git (>=3.0.3, <=3.35.2)

simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =23.0.0, =35.0.0, =1.4.0, =0.26.4, =0.1.5-alpha.0, =1.0.2, =0.0.0-aj-beta.221, =0.0.0-aj-beta.227 and more Source cves: CVE-2022-25912, CVE-2026-6951 Source advisory: SNYK:JS-SIMPLEGIT-15456078...

@aimo.network/svm (>=1.0.0, <=1.8.0), @andesmountain/x402-request (>=1.0.0, <=1.0.3) +9 more potentially affected by unknown CVE via @x402/svm (>=2.0.0, <=2.5.0)

@x402/svm NPM version =2.0.0, =1.0.0, =1.0.0, =0.1.0, =4.0.0, =0.12.7, =0.2.0, =0.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-QR2G-P6Q7-W82M...

[SECURITY] Fedora 43 Update: python3.11-3.11.14-5.fc43

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

CVE-2026-28457

OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in sandbox skill mirroring must be enabled that uses the skill frontmatter name parameter unsanitized when copying skills into the sandbox workspace. Attackers who provide a crafted skill package with traversal sequences...

[SECURITY] Fedora 44 Update: python3.11-3.11.14-5.fc44

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

Linux Distros Unpatched Vulnerability : CVE-2026-25679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus relies on the presence of the...