Malicious code in expect-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc39d28e4d33afe723182c097769f087bf528732e5468b1511bf2bff41db01e The package's main entry runs a worker that performs an HTTPS GET to https://realase-0626.vercel.app/api/v1 and passes the response's parser string...

CVE-2026-40686 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-66141 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-PPH6-FVMV-FJRC vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-40685 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2021-37137 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2026-40686 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-66141 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-5QXF-W5V2-M3RG vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-45185 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-PPH6-FVMV-FJRC vulnerabilities

Vulnerabilities for packages: exim...

GHSA-X8X4-4G6X-CX4H vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-40684 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-40685 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-FHG4-WHCV-F8V4 vulnerabilities

Vulnerabilities for packages: exim...

EUVD-2026-62910

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Representational State Transfer REST API to write files to locations that the user account running Splunk Enterprise can writ...

EUVD-2026-63126

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fshmanage capability could perform Remote Code Execution through Federated Search bundle selection. This could allow for access to all relevant data and affect system integrity and...