Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. An attacker using the npm account ehindero hijacked the @mastra npm organization and, in a roughly 30–45 minute burst starting around 01:12 UTC, republished the entire @mastra catalog. The Mastra source code was...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, apache-beam-python-3.12-sdk, authentik, open-webui, mlflow, py3.13-scanner-test-libraries-aiohttp, authentik-fips, py3-vllm-cuda-12.4, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, lmcache-cuda-12.8, request-1276,...

CVE-2026-54280 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, apache-beam-python-3.12-sdk, authentik, open-webui, mlflow, py3.13-scanner-test-libraries-aiohttp, authentik-fips, py3-vllm-cuda-12.4, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, lmcache-cuda-12.8, request-1276,...

CVE-2026-54278 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, apache-beam-python-3.12-sdk, authentik, open-webui, mlflow, py3.13-scanner-test-libraries-aiohttp, authentik-fips, py3-vllm-cuda-12.4, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, lmcache-cuda-12.8, request-1276,...

opencode-apk-forge

APKForge - The Dark Version of OpenCode ███╗ ███╗ ██╗...

Authentication Bypass

@nestjs/platform-fastify is vulnerable to Authentication Bypass. The vulnerability is due to improper route matching between Fastify and NestJS middleware registered through MiddlewareConsumer.forRoutes, which allows an attacker to bypass authentication middleware by appending a trailing slash / ...

CVE-2026-53776

creationtimestamp| type| source ---|---|--- 2026-06-16 17:21:17+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mogcpum37t2k 2026-06-16 17:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogert55pv2f 2026-06-16 18:00:45+00:00| seen|...

CVE-2026-12008 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GPGJ-GWJP-8VM9 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12034 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5X54-5CG6-5439 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-276G-W4M7-HP25 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PR7P-M797-X6PJ vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12008 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-34902

creationtimestamp| type| source ---|---|--- 2026-06-16 14:14:33+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mofybxl2vi2a...

CVE-2026-9071

creationtimestamp| type| source ---|---|--- 2026-06-16 13:55:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofx75zkbe24 2026-06-16 14:05:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofxqzhmmb2p...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.21.20 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.20 is now available with updates to packages and images that fix several bugs and add enhancements. This rehttps://art-dash.engineering.redhat.com/lease includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product...

EUVD-2026-32912

pypdf: Manipulated XMP metadata streams can exhaust RAM...

CVE-2026-12301

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-12329

Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12...