Malicious code in aura-instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14004b53bc245039cad1473ab4a95c2b2c8fcff2acc4b5f2c0f868da63e103bd package.json declares a self-named dependency 'aura-instrumentation' whose source is the bare URL https://repo.securityctrl.com/aura-instrumentation...

Malicious code in qbo-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7 package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services":...

Malicious code in ring-device-settings-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ea2aed3d7e8c0b9c99532d6714c486a5ad685418ebbd96c67b44b63f79fe01 package.json declares a dependency whose key equals the package's own name ring-device-settings-library and whose value is a raw HTTPS URL pointing a...

MAL-2026-15524 Malicious code in tabbables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc629ecaf81d15034bbba33363e63776d106e6f58932e889baa4cb748b689eb package.json at line 11 declares a dependency whose key equals the package's own name tabbables and whose value is the raw HTTPS URL...

Malicious code in one-intuit-help-system-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c22e9eaa97b1ee548e6ca6ac6257ea72fed0ee92d5b54255781e62b8ae19783 package.json declares a dependency whose key equals the package's own name one-intuit-help-system-utils and whose value is a bare HTTPS URL...

MAL-2026-15516 Malicious code in nx-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8671a9b563cebe9de36365a80edc1f242be492933cadb3e45ea590c8c5e1e115 package.json declares its own name nx-app as a dependency whose value is a raw HTTPS URL https://repo.securityctrl.com/nx-app rather than a semver...

Malicious code in nx-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8671a9b563cebe9de36365a80edc1f242be492933cadb3e45ea590c8c5e1e115 package.json declares its own name nx-app as a dependency whose value is a raw HTTPS URL https://repo.securityctrl.com/nx-app rather than a semver...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031579 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

SUSE CVE-2026-80535

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

UBUNTU-CVE-2026-80535

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535

CVE-2026-80535 affects the Linux kernel XFS file system. The dirtree scrubber can detect a directory that refers to itself; in that case, the directory tree repair code incorrectly attempts to iolock/ilock both sc->ip and dp, which are the same inode, resulting in a double-lock . The fix detec...

CVE-2026-80535 xfs: don't double-lock when deleting a self-referential directory

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

EUVD-2026-66450

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535 xfs: don't double-lock when deleting a self-referential directory

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

PT-2026-82151

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the dirtree scrubber can detect a directory that refers to itself. In such cases, the directory tree repair code incorrectly attempts to appl...

Linux Distros Unpatched Vulnerability : CVE-2026-80535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: metrics (UTSA-2026-093185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093185 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...