41680 matches found
CVE-2026-48165
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrepsstreceiveaddress or wsrepsstdonor global system...
MAL-2026-5700 Malicious code in transportator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f40d878023c5462d17916a03d22d7c2e9e1573ab590f50532aa2e620e7a5a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-50560
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in the http2 specification called...
CVE-2026-48059
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nest...
CVE-2026-47691
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name...
MAL-2026-5689 Malicious code in ecto-rust-read-f3a9c1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73d10b993d9601d0dfe78d143a550ed008b8233beb8b88b7443208e4d0fa89d On install, postinstall.js evaluates a targeting heuristic isRealTarget that fires only when the build environment looks like a real corporate...
MAL-2026-5688 Malicious code in ecto-nightly-spirit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dea0702101217f4a918a23191023bbd9e7d3b5478028bb0868341a574526e97 On npm install, postinstall.js executes unconditionally and performs three installer-harming actions. 1 It enumerates every key/value pair in...
CVE-2026-45674
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue...
GHSA-6V8Q-G97G-72XJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-35M9-R2Q7-2GGV vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11695 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MJ29-63W7-JWQF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M67C-5QCR-Q2MM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2HGR-CPRG-9825 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11692 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q4RM-H6XG-HCMQ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C668-R5MR-QR6C vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-855R-9WVC-25GH vulnerabilities
Vulnerabilities for packages: chromium...