Malicious code in portal-lime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61d5bfbd22f203a4a68f3329504312a967221d510ce7ceed02c663b0de8e002 The package portal-lime was found to contain malicious code...

Malicious code in node-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5f9e681ba9ecd6ac8399dc29bec6a699bd3595529aaebb037a7a0f79204746 The package node-intend was found to contain malicious code...

Malicious code in libxmlrussia2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742988acadb93f2a85625c677ab49a6e3bd1614b299c69781f7ba82fca23ad5f The package libxmlrussia2 was found to contain malicious code...

Malicious code in libxmljs2var-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c9273d9a31b1c550935b2367e8a3ba1bedb4668f432fec423a01bdc314ea0e The package libxmljs2var-ctf was found to contain malicious code...

Malicious code in collabs-merchants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58 The package collabs-merchants was found to contain malicious code...

MAL-2026-1680 Malicious code in chai-promised-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af3ac4bdf4f878612b66ee0cad227e2bef184fe763ff80478fc0905107d3edb The package chai-promised-await was found to contain malicious code...

Malicious code in @commonschema/blackstone-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f3edc28bea0e512a6dcee373cec98f067d76a64791869cfe843a2434edca05 The package @commonschema/blackstone-core was found to contain malicious code...

Malicious code in ethical-demo-liviy (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PT-2026-26163

openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...

CVE-2026-22727 Cloud Foundry unprotected internal endpoints

Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing them to access secure application information...

EUVD-2025-208735

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

CVE-2025-52643 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

CVE-2025-52643 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

CVE-2025-52648

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system...

CVE-2025-52638

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configuratio...

CVE-2025-52638

CVE-2025-52638 affects HCL AION. The documented issue is that generated containers may execute binaries with root-level privileges, increasing risk when containers run with root privileges inside the container environment. Connected sources reiterate the same vulnerability description across mult...

CVE-2025-52638 Multiple security vulnerabilities affect HCL AION

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configuratio...

PT-2026-25748

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

Summary The S3 storage manager's isAuthorized function is declared async returns Promise but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in JavaScript, !isAuthorizedtype always evaluates to false, completely bypassing the authorization check...

CVE-2026-31961

A flaw was found in Quill. An attacker can exploit this unbounded memory allocation vulnerability by providing a specially crafted Mach-O binary to Quill for processing. This malicious binary contains oversized values in its code signing structures, causing Quill to attempt to allocate excessive...