@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4601 via jsrsasign (>=11.0.0, <=11.1.0)

jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...

Oracle Linux 10 : gnupg2 (ELSA-2026-2719)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2719 advisory. 2.4.5-4 - Fix CVE-2026-24882 tpm2daemon buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

SUSE: Security Advisory (SUSE-SU-2026:0504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0763

Updates of 'openjdk21', 'python-wheel', 'glib', 'go', 'python3-wheel' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-23168

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flexproportions: make fpropnewperiod hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the...

RHEL 10 : golang (RHSA-2026:2706)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2706 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang: archive/zip: Excessive CPU consumption when...

Linux Distros Unpatched Vulnerability : CVE-2025-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose. CVE-2025-71220 Note that...

Linux Distros Unpatched Vulnerability : CVE-2025-71222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wlcore: ensure skb headroom before skbpush This avoids occasional skbunderpanic Oops from wl1271txwork. In this case, headroom is less than needed typical...

Linux Distros Unpatched Vulnerability : CVE-2026-23187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc-domains Fix out-of-range access of bc-domains in imx8mblkctrlremove. CVE-2026-23187 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2025-71204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: fix refcount leak in parsedurablehandlecontext When the command is a replay operation and -ENOEXEC is returned, the refcount of ksmbdfile must be...

Linux Distros Unpatched Vulnerability : CVE-2026-23196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer Add DMA buffer readiness check before reading DMA buffer to avoid unexpected NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-23188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: r8152: fix resume reset deadlock rtl8152 can trigger device reset during reset which potentially can result in a deadlock: DPM device timeout after 10...

Linux Distros Unpatched Vulnerability : CVE-2025-41117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious...

MiracleLinux 8 : osbuild-composer-101.4-3.el8_10.ML.1 (AXSA:2026-175:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-175:03 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding...

Ubuntu: Security Advisory (USN-8029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @devix-tecnologia/utils-ts (1.0.0) +2 more potentially affected by CVE-2026-26185 via directus (>=11.0.0, <=11.14.0)

directus NPM version =11.0.0, =1.6.3, =20.0.0-rc.0, =32.2.0 - @fahami/directus-pkce 1.0.0 Source cves: CVE-2026-26185 Source advisory: OSV:GHSA-JR94-GJ3H-C8RF...

GHSA-JH94-8Q48-F3M3 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-1299 vulnerabilities

Vulnerabilities for packages: python...

GHSA-JH94-8Q48-F3M3 vulnerabilities

Vulnerabilities for packages: python...

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

Cybersecurity researchers have discovered a fresh set of malicious packages across npm and the Python Package Index PyPI repository linked to a fake recruitment-themed campaign orchestrated by the North Korea-linked Lazarus Group. The coordinated campaign has been codenamed graphalgo in reference...