44375 matches found
GHSA-Q6M9-XJ2W-XMRC vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-35JP-WW65-95WH vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, kubeflow-katib, opensearch-dashboards-fips, langfuse, unleash, wazuh-dashboard, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, prism, awx, lern...
GHSA-898C-Q2CR-XWHG vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, kubeflow-katib, opensearch-dashboards-fips, langfuse, unleash, wazuh-dashboard, nextcloud-server, kubeflow-centraldashboard, arangodb, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, prism,...
CVE-2026-44492 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, wazuh-dashboard-fips, librechat, opensearch-dashboards-fips, langfuse, unleash, wazuh-dashboard, airflow-core, nextcloud-server, airflow, kubeflow-centraldashboard, arangodb, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips,...
Vulnerability Disclosure in the Age of AI
New article: "Responsible Disclosure in the Age of AI: A Call for Urgent Action," by Melissa Hathaway. Abstract: Artificial intelligence is fundamentally reshaping the balance between vulnerability discovery and remediation. Frontier AI models are now capable of autonomously identifying exploitab...
Malicious code in chai-as-minted (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d83ed5082a6682efba4b40e072e84fb1f7c6aa0dbf8ecd56a62c8d485e058e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-46605
Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, fr...
SECUREVENT: Hybrid AI/ML Security Monitoring for Distributed Event-Based Systems
Distributed event-based systems have become a common substrate for Internet-scale publish/subscribe services, IoT telemetry, cloud-native microservices, and security operations pipelines. Their loose coupling and asynchronous delivery improve scalability, but they also expand the attack surface:...
Malicious code in @redhat-cloud-services/types (npm)
Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...
CVE-2026-49389
Unknown description...
Linux Distros Unpatched Vulnerability : CVE-2024-13745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - edk2 - None Ubuntu Linux - several issues with partition table measurements CVE-2024-13745 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2026-42250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds write to a globa...
Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)
Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...
Malicious Package
Overview Sicoob-Cooperativa.Sicoob.Investimentos is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
Exploit for CVE-2026-8836
CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Proof of conce...
CVE-2026-39821 affecting package kured for versions less than 1.15.0-5
CVE-2026-39821 affecting package kured for versions less than 1.15.0-5. A patched version of the package is available...
CVE-2026-39835 affecting package packer for versions less than 1.9.5-14
CVE-2026-39835 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
GHSA-5699-PPR6-8H44 vulnerabilities
Vulnerabilities for packages: grafana...