30614 matches found
Malicious code in streak-metricsaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...
MAL-2026-11527 Malicious code in streak-metricsaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate, wazuh-dashboard, npm, sqlpad,...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate, wazuh-dashboard, npm, sqlpad,...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, commercial-gitlab-rails-ee-fips, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate,...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, commercial-gitlab-rails-ee-fips, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate,...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate, wazuh-dashboard, npm, sqlpad,...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, graalvm, unleash-proxy, prism, librechat, kibana, opensearch-dashboards, pulumi, langfuse-fips, actions-runner, unleash, code-server, kubeflow-pipelines, lerna, unleash-fips, renovate, wazuh-dashboard, npm, sqlpad,...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: langfuse, saf, unleash-proxy, prism, librechat, gitlab-rails-ce, arangodb, commercial-gitlab-rails-ee-fips, opensearch-dashboards, yaml-language-server, langfuse-fips, argo-workflows, nextcloud-server, jupyter-base-notebook, renovate, vitess,...
GHSA-RGW5-RVV9-X895 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, kubeflow-katib, pelias-api, graalvm, unleash-proxy, ts-patch, prism, gitlab-rails-ce, bash-language-server, authentik, arangodb, commercial-gitlab-rails-ee-fips, opensearch-dashboards, pulumi, azurite, langfuse-fips, argo-workflow...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: langfuse, saf, unleash-proxy, prism, librechat, gitlab-rails-ce, arangodb, commercial-gitlab-rails-ee-fips, opensearch-dashboards, yaml-language-server, langfuse-fips, argo-workflows, nextcloud-server, jupyter-base-notebook, renovate, vitess,...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, saf, kubeflow-katib, pelias-api, graalvm, unleash-proxy, ts-patch, prism, gitlab-rails-ce, bash-language-server, authentik, arangodb, commercial-gitlab-rails-ee-fips, opensearch-dashboards, pulumi, azurite, langfuse-fips, argo-workflow...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
sh4d0wup v0.11.1
sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...
EUVD-2026-52753
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...
ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root
Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784596275 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 1.3.1-tuxcare.1...
CLSA-2026-1784509824 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.3...