180 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-43323
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zerovruntime tracking fix John reported that stress-ng-yield could make his...
CVE-2026-32723
SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global tick state currentTicks.current is shared between sandboxes. Timer string handlers are compiled at execution time using that global tick state rather than the scheduling...
CVE-2026-32723
SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global tick state currentTicks.current is shared between sandboxes. Timer string handlers are compiled at execution time using that global tick state rather than the scheduling...
CVE-2026-32723
SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global tick state currentTicks.current is shared between sandboxes. Timer string handlers are compiled at execution time using that global tick state rather than the scheduling...
PT-2026-25822
Summary Assumed repo path is /Users/zwique/Downloads/SandboxJS-0.8.34 no /Users/zwique/Downloads/SandboxJS found. A global tick state currentTicks.current is shared between sandboxes. Timer string handlers are compiled at execution time using that global tick state rather than the scheduling...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005480)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005480 advisory. In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Move per CPU pointer access into the atomic section The recent fix for making the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993297)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993297 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990751)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990751 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit...
EUVD-2025-99287
Malicious code in emptytickz3n npm...
Malicious code in gradual_tick_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96ba6f9d02e5dca662172fee066519d528b8fb242ca7d8acc63480885bd4e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-106016
Malicious code in concretetickz3n npm...
EUVD-2025-95254
Malicious code in roundtickz3n npm...
MAL-2025-112325 Malicious code in socialist_tick_yellow-78 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1cfe0cba432a144cd73f2a359521e46a3136dc4a5b4815ee44f2c14ae8150c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in public_tick-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76479
Malicious code in justtick-appteadev npm...
EUVD-2025-78350
Malicious code in selfishtickz3n npm...
EUVD-2025-79495
Malicious code in crowdedtickz3n npm...
MAL-2025-108524 Malicious code in selfish_tick_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9b195f5dba6a5bb112fb70e3cf028fa6f7513a4f25e3ad85354648cca25d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...