GHSA-3PX7-C4J3-576R vulnerabilities

Vulnerabilities for packages: grafana-fips...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-016492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016492 advisory. OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted ...

GHSA-C4R5-FXQW-VH93

creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

RHEL 9 : thunderbird (RHSA-2026:0019)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0019 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6,...

EUVD-2025-84409

Malicious code in ogi-rojak32-miaww npm...

a7a1234 (=1.0.0), aas2openapi (>=0.2.0 <=0.2.4) +2554 more potentially affected by CVE-2025-43859 via h11 (>=0.10.0 <=0.15.0)

h11 PYPI version =0.10.0, =0.2.0, =0.2.1, =1.2.1, =0.7.3.post0, =0.1.0, =2.0.0.1, =0.0.1, =0.1.0, =0.8.3, =0.1.0, =4.8.2, =0.1.0, =0.1.1 - adminui =1.5.2 and more Source cves: CVE-2025-43859 Source advisory: OSV:GHSA-VQFR-H8MV-GHFJ...

GHSA-VGF2-GVX8-XWC3

creationtimestamp| type| source ---|---|--- 2025-01-14 18:10:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1557...

ai.blip:deckard (>=0.0.23 <=0.0.26), ai.djl.tablesaw:tablesaw (>=0.18.0 <=0.32.0) +39064 more potentially affected by CVE-2020-8908 via com.google.guava:guava (>=r03 <=31.1-jre)

com.google.guava:guava MAVEN version =r03, =0.0.23, =0.18.0, =0.19.0, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-3.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.0.3, =2.6.0-looktech.1, =2.6.0-looktech.2 and more Source cves: CVE-2020-8908 Source advisory:...

ai4bharat-transliteration (>=1.1.0 <=1.1.3), aipack (>=0.0.1 <=0.0.5) +52 more potentially affected by CVE-2020-15202 via tensorflow (>=2.0.0 <=2.0.1)

tensorflow PYPI version =2.0.0, =1.1.0, =0.0.1, =0.1.3.2, =0.2.6, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15202 Source advisory: OSV:GHSA-H6FG-MJXG-HQQ4...

com.ge.research.semtk:arangoDbService (=2.2.2), com.ge.research.semtk:athenaService (=2.2.2) +136 more potentially affected by CVE-2018-1284 via org.apache.hive:hive-service (>=0.8.0 <=2.3.2)

org.apache.hive:hive-service MAVEN version =0.8.0, =2.2.1, =2.2.1, =2.2.1, =2.2.2 - com.ge.research.semtk:sparqlGraphResultsService =2.2.2 and more Source cves: CVE-2018-1284 Source advisory: OSV:GHSA-RXMR-C9JM-7MM8...