Malicious code in @mastra/express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd00df32d6d56cd3d4996965ed13e18c1da3a9b0007392b4fc14da1a8fcbb46 The package's bundled distribution files dist/index.cjs and dist/index.js contain a Buffer.from..., 'base64'.toString'utf-8' decode pattern. This...

MAL-2026-5957 Malicious code in @mastra/mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590f8f6b10eff7b7dd626b6e382339b7122f26b43bae2ec5fa02801b0a710638 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5945 Malicious code in @mastra/dynamodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2567710170942391d967675952bbdd9cd0f8d933cc39e4cf4460ca4c5b700097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5952 Malicious code in @mastra/langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30e29c157bf23964dd09537f5c99aeb494c21ebce16d6a33b746a576a02566b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30e29c157bf23964dd09537f5c99aeb494c21ebce16d6a33b746a576a02566b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/libsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbf064d557b14369949349954c599a26dda8f1d99e99bc5528c4b94e99bffb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

SUSE CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

CVE-2026-48817 vulnerabilities

Vulnerabilities for packages: mlflow, nemo, tritonserver-backend-vllm-cuda-12.9...

Linux Distros Unpatched Vulnerability : CVE-2026-12440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a...

Linux Distros Unpatched Vulnerability : CVE-2026-12453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process ...

PT-2026-50471

Name of the Vulnerable Software and Affected Versions chrome-devtools-mcp affected versions not specified Description On POSIX systems, specifically macOS and Linux sessions where the XDG RUNTIME DIR environment variable is unset, the daemon writes its PID file to a deterministic path in /tmp usi...

PT-2026-50494

Name of the Vulnerable Software and Affected Versions @earendil-works/pi-coding-agent versions 0.74.0 through 0.78.0 @mariozechner/pi-coding-agent versions 0.50.0 through 0.73.1 Description Pi is a minimal terminal coding harness that used predictable paths under the operating system temporary...

Linux Distros Unpatched Vulnerability : CVE-2026-12447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML...

CVE-2026-39044

Integer overflow in WAV parser cue handling...

Linux Distros Unpatched Vulnerability : CVE-2026-12448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a...

ROS-20260617-73-0037

The vulnerability in ImageMagick is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.

The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-12317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12317 Note that Nessus relies on the presence ...

The vulnerability of the Projected File System component in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...