GHSA-CHJ4-28RG-G73V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HPGJ-JH3H-GJMR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J5QM-C5W8-5G85 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-M34R-5P3P-Q822 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MGQF-QH5M-W5XX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QF67-QCVF-27GX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WH82-47GG-P482 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X43M-GVP6-H6MF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XM7R-268R-WW34 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9H3R-77J2-MGH9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HH3H-HX57-WXHF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PHR6-CG52-W545 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-8510 vulnerabilities

Vulnerabilities for packages: chromium...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048. Patch Instructions: To install this SU...

Malicious code in @riskine-frontend/design-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307db7b976bd8c59b1e8e8247fee9f91ab6a353bf0ae6aa129ceb8e552d6814c @riskine-frontend/[email protected] is a near-empty package whose only effect on install is to pull an external dependency. index.js contains ju...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TESTIOVITER depends on MMU. Attempting to run the ioviter unit test on a nommu system, such as the qemu kc705-nommu emulation, results in a crash. KTAP version 1 Subtest: ioviter Module: kunitioviter 1..9 BUG:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mac80211: Fix for corruption due to changed flags in MBSS on 32-bit systems. On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged...

Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It said the scope of the incident is limited to the Grafana Labs GitHub environment, which includes public and private source code along wi...

firefox: thunderbird: Privilege escalation in the Debugger component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Debugger component...

MAL-2026-4249 Malicious code in truffle-config-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2204d3386cd8473771610640812df94a0c65c5482027bd7a59282398d38e73db On npm install, the package's postinstall hook package.json line 13 issues an HTTPS GET to...