48174 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007455)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007455 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007230)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007230 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oopsable condition in nfspageioaddrequest Ensure that nfspageioerrorcleanup resets th...
BIT-AUTHENTIK-2026-25227 authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint
authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...
MAL-2026-2890 Malicious code in chai-as-ide (npm)
chai-as-ide is a malicious npm package that when imported downloads a C2 dropper from https://api.npoint.io/244f4de235f04fbcd51a and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of React Router
Summary Due to use of React Router, DevOps Test Performance and Rational Performance Tester contain a Open Redirect vulnerability, potentially enabling phishing or credential theft. Vulnerability Details CVEID:CVE-2025-68470 DESCRIPTION: React Router is a router for React. In versions 6.0.0 throu...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the glob npm package
Summary Due to use of the glob npm package, DevOps Test Performance and Rational Performance Tester contain a potential command injection vulnerability. Vulnerability Details CVEID:CVE-2025-64756 DESCRIPTION: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior t...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Connect2id Nimbus JOSE + JWT library
Summary Due to use of the Connect2id Nimbus JOSE + JWT library, DevOps Test Performance and Rational Performance Tester contain a potential Denial of Service DoS vulnerability. Vulnerability Details CVEID:CVE-2025-53864 DESCRIPTION: Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the npm semver package
Summary Due to use of the npm semver package, DevOps Test Performance and Rational Performance Tester contain a potential Regular Expression Denial of Service ReDoS vulnerability. Vulnerability Details CVEID:CVE-2022-25883 DESCRIPTION: Versions of the package semver before 7.5.2 are vulnerable to...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Node.js on-headers middleware
Summary Due to use of the Node.js on-headers middleware, DevOps Test Performance and Rational Performance Tester contain an Improper Handling of Unexpected Data Type vulnerability, potentially enabling header manipulation. Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is a...
Malicious code in requests-test-test44 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-2812 Malicious code in requests-test-test44 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in requests-test-test2 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-2811 Malicious code in requests-test-test3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in requests-test-test3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-2809 Malicious code in bombonsec-test-123 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bombonsec-test-123 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in insomnia-smoke-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...
MAL-2026-2775 Malicious code in insomnia-smoke-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...
MAL-2026-2765 Malicious code in ghscan-pkgcheck-test-001 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867757df0e86dde6839938aaabe7b5c9574bf49dae685032524081e87f8b3435 The package ghscan-pkgcheck-test-001 was found to contain malicious code...
Malicious code in ghscan-pkgcheck-test-001 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867757df0e86dde6839938aaabe7b5c9574bf49dae685032524081e87f8b3435 The package ghscan-pkgcheck-test-001 was found to contain malicious code...