CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

KOREX

⚡ KOREX FRAMEWORK ⚡ Advanced Security Operations Framework "Kore...

actpdf (>=0.1.0 <=0.12.0), agenticmem (>=0.1.4.1 <=0.1.5.0) +212 more potentially affected by CVE-2025-68616 via weasyprint (>=0.28.0 <=67.0.0)

weasyprint PYPI version =0.28.0, =0.1.0, =0.1.4.1, =0.5.0, =0.1.1, =0.1.1, =0.1.0, =0.5.0, =1.1.0, =0.1.0, =0.7.0, =0.10.0a68 and more Source cves: CVE-2025-68616 Source advisory: SNYK:PYTHON-WEASYPRINT-15035957...

Malicious code in aggregate-moccasin-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117518

Malicious code in aggregate-moccasin-parrot npm...

EUVD-2025-117292

Malicious code in interesting-jade-parrot npm...

Malicious code in compact_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0cf3af3fa23bdb9c4ed69917f0b276e0e3282b3157f18c79005f3ff7bf0f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e20c00bce888c3b0306b86df9e8a8feb45470fe5d7b1be74641bda67dacef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106049

Malicious code in coherentparrotz3n npm...

EUVD-2025-106569

Malicious code in appallingparrotz3n npm...

EUVD-2025-105574

Malicious code in elegantparrotz3n npm...

Malicious code in elegant_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a5daccd4b0c016b56f0d5457d58de96e7c4bc34744e22342a4706fda5310d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7a795b4ab4dbea26afe35095a1d0100bef5f3f82113998c60db5a3013a09fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91813

Malicious code in formalparrotz3n npm...

EUVD-2025-75533

Malicious code in stormyparrot-appteadev npm...

EUVD-2025-76904

Malicious code in experimentalparrot-silentdev npm...

EUVD-2025-79295

Malicious code in excitedparrotz3n npm...

Malicious code in remarkable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66562883672c16e175a8786573b9e134f11890624072b77ed5796c2fe0c9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78190

Malicious code in stuckparrotz3n npm...