MAL-2026-561 Malicious code in transform-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27369af46b5944368333c959121eb4c1203bb7451f05eab71a7e8d030300331 The package transform-regenerator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-551 Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

MAL-2026-552 Malicious code in json-mapping-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d9a56e7e0fdb852db49a56abffcdded34d184708b167002fe2e199438063aa The package json-mapping-web was found to contain malicious code. Source: ghsa-malware 37a8fbc4bd325b28e53dce222bdb8b8e10ff6f5559edb6e97605e1ee5cec17...

CVE-2023-39333 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-22019 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-27983 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-22025 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-52XJ-VX8W-46QJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-GGXC-26FX-987R vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-66021 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-24116 vulnerabilities

Vulnerabilities for packages: wasmcloud, yara-x, zellij, zed, wizer...

CVE-2024-22019 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-27982 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-XP28-3FV9-33C6 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-59466 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-52XJ-VX8W-46QJ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2022-40619

A third-party module named FunJSQ , integrated into various NETGEAR routers and Orbi WiFi Systems , exposes an HTTP server over the LAN interface. This interface is vulnerable to unauthenticated arbitrary command injection via the funjsq_access_token parameter due to improper neutralization of sp...

CVE-2022-40620

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

CVE-2022-40619

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...

CVE-2022-40619: Improper Neutralization of Special Elements used in a Command

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...