319491 matches found
MINI-XR3M-78C3-9GFG
Bulletin has no description...
MINI-44G9-J4Q9-5WP3
Bulletin has no description...
MINI-HV6C-JJ5V-6XGW
Bulletin has no description...
MINI-553P-H93R-J8RW
Bulletin has no description...
Malicious code in test-flow-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7f0fbad80f9bdcba1c9d37322137d8f3a7bd86353650c5f946c73b1bb4637 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
kin v0.5.42
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)
Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...
Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)
Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...
Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)
Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...
CVE-2026-76346
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:00+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
GHSA-CR32-G25G-VXJJ vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
PT-2026-79010
ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...
The Software Supply Chain As a Market for Lemons: A Multivocal Review of Trust Signal Collapse
Practitioners evaluating open-source dependencies rely on cheap trust signals, e.g., stars, download counts, and contributor activity, as substitutes for direct code inspection, assuming those signals reflect genuine trustworthiness. Prior work has documented individual signal gaming, but the...
cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN
cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN...
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...
cve-2026-47878 - MEDIUM - Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist
cve-2026-47878 - MEDIUM - Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist...
cve-2026-47879 - HIGH - Spring Cloud Gateway SSRF and native file access with gRPC
cve-2026-47879 - HIGH - Spring Cloud Gateway SSRF and native file access with gRPC...
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File...