MAL-2026-16529 Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16527 Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16526 Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16525 Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...

EUVD-2026-84496

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

MAL-2026-16352 Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

SUSE CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

SUSE CVE-2026-90405

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

Linux Distros Unpatched Vulnerability : CVE-2026-90233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is...

Linux Distros Unpatched Vulnerability : CVE-2026-93142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal/drivers/rcar: Fix error checking in probe This code accidentally calls thermalzonedeviceenable before checking whether thermalzonedeviceregisterwithtrip...

Linux Distros Unpatched Vulnerability : CVE-2026-90329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: synchronize input before cleaning up a failed probe hiddeviceiostart allows reports to run concurrently with probe. If the probe subsequently fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-90084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-93141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: r8a66597: avoid double free of ep0req in probe error path If usbaddgadgetudc fails, r8a66597probe jumps to erraddudc and frees ep0req, then falls...

Linux Distros Unpatched Vulnerability : CVE-2026-90405

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1...

Linux Distros Unpatched Vulnerability : CVE-2026-90241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Tear down scalable-mode context on probe failure intelpasidsetupsmcontext walks a PCI device's DMA aliases via pciforeachdmaalias and programs a...

Linux Distros Unpatched Vulnerability : CVE-2026-93083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully...