Linux Distros Unpatched Vulnerability : CVE-2026-67315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0...

OnionHop v3.7.8

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

Malicious code in streak-math-abz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eddf7b9d6d5331bdc1c1afe40913620b219afcc06a705aef3fe547ddc5cf25 The package advertises itself as a JavaScript day-math helper but its ESM main entry dist/index.mjs unconditionally spawns a bundled Linux x8664 ELF...

MAL-2026-11548 Malicious code in streak-math-abz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eddf7b9d6d5331bdc1c1afe40913620b219afcc06a705aef3fe547ddc5cf25 The package advertises itself as a JavaScript day-math helper but its ESM main entry dist/index.mjs unconditionally spawns a bundled Linux x8664 ELF...

CVE-2026-16728

A flaw was found in undici. A malicious or faulty upstream server could send a partial response with incorrect length information. When undici's retry interceptor processes this, it may create a response body with a length that does not match the original Content-Length header. This can lead to...

MAL-2026-11527 Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, graalvm, sqlpad, code-server, librechat, pulumi, unleash-fips, actions-runner, wazuh-dashboard, wazuh-dashboard-fips, npm, unleash,...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, graalvm, sqlpad, code-server, librechat, pulumi, unleash-fips, actions-runner, wazuh-dashboard, wazuh-dashboard-fips, npm, unleash,...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, commercial-gitlab-rails-ee, graalvm, sqlpad, code-server, commercial-gitlab-rails-ee-fips, librechat, pulumi, unleash-fips,...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, commercial-gitlab-rails-ee, graalvm, sqlpad, code-server, commercial-gitlab-rails-ee-fips, librechat, pulumi, unleash-fips,...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, graalvm, sqlpad, code-server, librechat, pulumi, unleash-fips, actions-runner, wazuh-dashboard, wazuh-dashboard-fips, npm, unleash,...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, lerna, kibana, kubeflow-pipelines, langfuse-fips, prism, langfuse, saf, graalvm, sqlpad, code-server, librechat, pulumi, unleash-fips, actions-runner, wazuh-dashboard, wazuh-dashboard-fips, npm, unleash,...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, dotstatsuite-supercore, foxx-cli, renovate, opensearch-dashboards-fips, langfuse-fips, argo-workflows, arangodb, langfuse, prism, azurite, pelias-api, saf, nextcloud-server, serve, gemini-cli, commercial-gitlab-rails-ee, authentik-fips,...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, langfuse-fips, argo-workflows, arangodb, langfuse, prism, saf, serve, nextcloud-server, gemini-cli, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, vitess, gitlab-rails-ce-fips, librechat,...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, opensearch-dashboards-fips, langfuse-fips, argo-workflows, arangodb, langfuse, prism, saf, serve, nextcloud-server, gemini-cli, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, vitess, gitlab-rails-ce-fips, librechat,...

GHSA-RGW5-RVV9-X895 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, dotstatsuite-supercore, foxx-cli, renovate, opensearch-dashboards-fips, langfuse-fips, argo-workflows, arangodb, langfuse, prism, azurite, pelias-api, saf, nextcloud-server, serve, gemini-cli, commercial-gitlab-rails-ee, authentik-fips,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

sh4d0wup v0.11.1

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

EUVD-2026-52753

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...