GHSA-442J-39WM-28R2 vulnerabilities

Vulnerabilities for packages: ts-patch, py3-jupyterlab, gitlab-rails-ce, pelias-api, opensearch-dashboards, tensorflow-cpu-jupyter, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards-fips, prism, lerna, tileserver-gl-fips, rancher-api-ui, kibana, gitlab-rails-ce-fips, wazuh-dashboard...

GHSA-3MFM-83XF-C92R vulnerabilities

Vulnerabilities for packages: ts-patch, py3-jupyterlab, gitlab-rails-ce, pelias-api, opensearch-dashboards, tensorflow-cpu-jupyter, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards-fips, prism, lerna, tileserver-gl-fips, rancher-api-ui, kibana, gitlab-rails-ce-fips, wazuh-dashboard...

GHSA-2W6W-674Q-4C4Q vulnerabilities

Vulnerabilities for packages: ts-patch, py3-jupyterlab, gitlab-rails-ce, pelias-api, opensearch-dashboards, tensorflow-cpu-jupyter, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards-fips, prism, lerna, tileserver-gl-fips, rancher-api-ui, kibana, gitlab-rails-ce-fips, wazuh-dashboard...

CVE-2026-33940 vulnerabilities

Vulnerabilities for packages: ts-patch, py3-jupyterlab, gitlab-rails-ce, pelias-api, opensearch-dashboards, tensorflow-cpu-jupyter, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards-fips, prism, lerna, tileserver-gl-fips, rancher-api-ui, kibana, gitlab-rails-ce-fips, wazuh-dashboard...

CVE-2026-33938 vulnerabilities

Vulnerabilities for packages: ts-patch, py3-jupyterlab, gitlab-rails-ce, pelias-api, opensearch-dashboards, tensorflow-cpu-jupyter, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards-fips, prism, lerna, tileserver-gl-fips, rancher-api-ui, kibana, gitlab-rails-ce-fips, wazuh-dashboard...

GHSA-8GC5-J5RX-235R vulnerabilities

Vulnerabilities for packages: prism, renovate, kubeflow-pipelines, tileserver-gl, saf, jitsucom-jitsu...

CVE-2026-33036 vulnerabilities

Vulnerabilities for packages: prism, renovate, kubeflow-pipelines, tileserver-gl, saf, jitsucom-jitsu...

OpenClaw PRISM: A Zero-Fork, Defense-In-Depth Runtime Security Layer for Tool-Augmented LLM Agents

Tool-augmented LLM agents introduce security risks that extend beyond user-input filtering, including indirect prompt injection through fetched content, unsafe tool execution, credential leakage, and tampering with local control files. We present OpenClaw PRISM, a zero-fork runtime security layer...

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

SRK Powertech Pebble Prism Ultra 安全漏洞

The SRK Powertech Pebble Prism Ultra is a Bluetooth-enabled smartwatch produced by the Indian company SRK Powertech. Version 2.9.2 of the SRK Powertech Pebble Prism Ultra contains a security vulnerability. This vulnerability stems from the lack of authentication and authorization mechanisms in th...

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

PT-2026-22940

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

EUVD-2025-208281

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

CVE-2026-27904 vulnerabilities

Vulnerabilities for packages: serve, opensearch-dashboards, prism, renovate, py3-jupyterlab, tileserver-gl, pulumi, vitess, npm, eslint, tensorflow-cpu-jupyter, node-gyp, code-server, lerna, argo-workflows, kubeflow-centraldashboard, ts-patch, saf, pnpm-stage0, kubeflow-katib...

GHSA-7R86-CG39-JMMJ vulnerabilities

Vulnerabilities for packages: serve, opensearch-dashboards, prism, renovate, py3-jupyterlab, tileserver-gl, pulumi, vitess, npm, eslint, tensorflow-cpu-jupyter, node-gyp, code-server, lerna, argo-workflows, ts-patch, saf, pnpm-stage0, kubeflow-katib...

CVE-2026-27903 vulnerabilities

Vulnerabilities for packages: serve, opensearch-dashboards, prism, renovate, py3-jupyterlab, tileserver-gl, pulumi, vitess, npm, eslint, tensorflow-cpu-jupyter, node-gyp, code-server, lerna, argo-workflows, ts-patch, saf, pnpm-stage0, kubeflow-katib...

GHSA-23C5-XMQV-RM74 vulnerabilities

Vulnerabilities for packages: serve, opensearch-dashboards, prism, renovate, py3-jupyterlab, tileserver-gl, pulumi, vitess, npm, eslint, tensorflow-cpu-jupyter, node-gyp, code-server, lerna, argo-workflows, kubeflow-centraldashboard, ts-patch, saf, pnpm-stage0, kubeflow-katib...

Malicious Package

Overview prism-lint is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...