Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper sanitization of .. in the Remote process. An attacker can manipulate file paths to escape the intended backend confinement by supplying specially crafted object names containing directory traversal...

CVE-2026-16172 Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...

CVE-2026-76059

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by a protection mechanism failure (CWE-693) in its static code security scanner. An attacker who can submit custom component source code can bypass the scanner by crafting an annotated class-body assignment that resolves to a dangerous c...

DEBIAN-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

UBUNTU-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

Malicious code in pinochiomathm (npm)

Source: amazon-inspector 135c673bb3925502b10f92d9819d956004ade25faa9c358f6d3fb2c67cd6114e The package impersonates picomatch name 'pinochiomathm', description copied from picomatch, homepage pointing at github.com/micromatch/picomach. On require, lib/pinochiomathm.js reads lib/parse.ts.map,...

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that...

SUSE CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises during the btrfs relocation process. It occurs when the loading or addition of the subsequent root fails, or when the first transaction submission fails, and the relocroot reference is not cleared and released properly. This...

UBUNTU-CVE-2026-88924

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check...

Malicious code in exec-ignite-hermes-process (npm)

Source: amazon-inspector 726b2645751743cf3aae79ce0cc9b10a4997d86f928762af4164921ef402202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in event-transform-apex-child-process (npm)

Source: amazon-inspector 8329d07d153602e53d39e6ab9792a42a05d33fe8f6d9b74237d2d37676bac1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in europa-jekyll-xerxes-process (npm)

Source: amazon-inspector 1705ca9806e9f300c9c1ca012b4bb3beb9f94e83288c76176704730d08ce77f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in europa-child-process-link-reveal-md (npm)

Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-plugin-process-sails-update (npm)

Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-hugo-indus-process (npm)

Source: amazon-inspector e96530a9a643952073fff332c1ad656ea9314648258f54a2ba8a5b6cd6ed8ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)

The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in equinox-child-process-deneb-changelog (npm)

Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...