GHSA-6CJ7-V55X-8MWR vulnerabilities

Vulnerabilities for packages: python...

GHSA-JG6J-874M-WGJJ vulnerabilities

Vulnerabilities for packages: python...

GHSA-VRF3-M22C-R362 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12016 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QQ7Q-F996-8XMG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GPGJ-GWJP-8VM9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-88G6-23MM-RPG4 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12034 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12017 vulnerabilities

Vulnerabilities for packages: chromium...

firefox: Privilege escalation in the Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Security component...

Malicious code in hot-validation-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76065c270ae195ee042c46a6d0ade5737992948d3f3068f367fc6bfef474ce9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-14272

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-01 2026-06-16 17:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogd547waq2m...

CVE-2026-48069 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, jitsucom-jitsu...

SUSE CVE-2026-47729

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway src/clients/FtpGateway.cc, Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed...

PT-2026-56442

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.55 n8n versions prior to 2.25.7 n8n versions prior to 2.26.2 Description An authorization bypass exists in the Evaluations feature within the 'POST /workflows/workflowId/test-runs/new' endpoint. The system incorrect...

PT-2026-51404

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.7 Description Multiple security issues affect the Crawl4AI Docker API server. The software is susceptible to Server-Side Request Forgery SSRF, a condition where an attacker can induce the server to make requests ...

CVE-2026-39949

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

Malicious code in prettier_v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae1d77d25db3af85295c48a446f6c0f2f65252ea2483c45ce81df12c75b1fcb Package name 'prettierv1' closely resembles the widely-used 'prettier' formatter package, a classic typosquat naming pattern. The file lib/mirror.js...

Malicious code in numdifftools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6d98d619244a4f34ba9c2ed85023e35f4064b0a45871edac806d1e8cdeff11 The npm package numdifftools is an empty shell zero-byte index.js that exists solely to fire a preinstall lifecycle hook. The hook runs node -e to...

GHSA-RRMF-RVHW-RF47 vulnerabilities

Vulnerabilities for packages: py3-torch-cuda-12.9, py3-torch-cuda-12.8, py3-torch-cuda-12.4, open-webui, py3-torch-cuda-13.3, py3-torch-cuda-13.0, py3-torch-cuda-13.1, lmcache-cuda-13.0, py3-torch-cuda-13.2, py3-torch-cuda-12.6, vllm-openai-cuda-13.0, vllm-cuda-13.2, nemo...