54123 matches found
Malicious code in relion-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650bf9452e7eaed5b89edb5f2af6208d4491aa079a90805fd6360b32ee6ff6d8 The package relion-chain was found to contain malicious code...
MAL-2026-2788 Malicious code in otomi-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9238b0645d7de5b5df1ba2ccc3d6a6d2d476b29cfd3a7eaa583ec4c32c7839 The package otomi-console was found to contain malicious code...
MAL-2026-2785 Malicious code in nemo-jaws (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...
Malicious code in farikku-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74e79e5f35cd4e3f49a89dc7e0c244bdd40466a158c84cf45b61bb23553bd27 The package farikku-util was found to contain malicious code...
Malicious code in @3stripes/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca39203b484afe25fca27596d3c3c81a0a6765ad88d3b129871375127bdb5ea The package @3stripes/shared was found to contain malicious code...
Fedora: Security Advisory (FEDORA-2026-3aebe19127)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-6318
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-32196
CVE-2026-32196 is a Windows Admin Center spoofing vulnerability. The CVSSv3.1 base score is 6.1 (Medium) with network as the attack vector, low attack complexity, no privileges required, and user interaction needed. The scope is changed, with low impacts to confidentiality and integrity and no im...
JLSEC-2026-108 Deno's AES GCM authentication tags are not verified
Summary This affects AES-256-GCM and AES-128-GCM in Deno, introduced by commit 0d1beed. Specifically, the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the guarantees expected from AES-GCM. Older versions of Deno...
GHSA-3JP4-MHH4-GCGR Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler
Summary The SAML authentication success handler in Kimai returns the RelayState POST parameter as a redirect destination without validating the host or scheme. After a user successfully authenticates via SAML, they are redirected to an attacker-controlled URL if the IdP includes a malicious...
EUVD-2026-22813
Sigstore Timestamp Authority has Improper Certificate Validation in verifier...
CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1
CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-6167
creationtimestamp| type| source ---|---|--- 2026-04-13 09:17:05+00:00| seen| Telegram/bcMGQo5yfO9RORBGyfkr5CsGhdtRQYWZD2qi5kLjohdbd-Q...
Mageia: Security Advisory (MGASA-2026-0096)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-26999 vulnerabilities
Vulnerabilities for packages: traefik...
CVE-2026-34480
Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.htmlXmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/charsets producing invalid XML output whenever a log message or M...
SUSE: Security Advisory (SUSE-SU-2026:1214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-34757
creationtimestamp| type| source ---|---|--- 2026-04-09 16:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3aukhvnf22 2026-04-10 02:01:05+00:00| seen| https://bsky.app/profile/slackers.it/post/3mj4a2qtssr2n 2026-05-19 12:01:15+00:00| seen|...
CVE-2026-40046 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated
Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 and future 5.19.x releases but was missed for all 6.0.0+...