39616 matches found
Malicious code in @onereach/si-switch (npm)
npm/@onereach/si-switch is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...
MAL-2026-11644 Malicious code in @onereach/si-select (npm)
npm/@onereach/si-select is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...
Malicious code in @ornikar/stylelint-config (npm)
npm/@ornikar/stylelint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CVE-2026-18770
A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...
CVE-2026-11368
The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...
CLSA-2026-1785380980 TuxCare security update for guzzlehttp/guzzle (2 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 6.0.2-p4+tuxcare...
CLSA-2026-1785468081 TuxCare security update for lodash-es (3 CVEs)
TuxCare rebuilt lodash-es to address 3 CVEs. Fixed in 4.17.21-tuxcare.1...
CLSA-2026-1785204448 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 5 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.1...
CLSA-2026-1785380233 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.1...
CLSA-2026-1784856461 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.0-tuxcare.2...
CLSA-2026-1784856450 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.6-tuxcare.3...
CLSA-2026-1784769583 TuxCare security update for 55 packages (1 CVE)
TuxCare rebuilt 55 packages to address 1 CVE. Fixed in 7.6.0.v20120127-tuxcare.2...
CLSA-2026-1784856187 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.2...
CLSA-2026-1784769547 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1...
CLSA-2026-1784769548 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 3 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.1...
CLSA-2026-1784682932 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 3.0.5.RELEASE-tuxcare.9...
CLSA-2026-1784682981 TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)
TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.1.2.RELEASE-tuxcare.1...
CLSA-2026-1784596278 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.3-tuxcare.3...