Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout: PGD 7e6fe6206...

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," w...

CVE-2026-89176

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:23+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m 2026-09-11 11:00:49+00:00| seen|...

CVE-2026-89174

creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:20+00:00| seen| https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html 2026-09-11 11:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o 2026-09-11 12:01:56+00:00| seen|...

CVE-2026-82181

creationtimestamp| type| source ---|---|--- 2026-09-01 00:45:03+00:00| seen| https://www.twcert.org.tw/en/cp-139-11128-8bd30-2.html...

MAL-2026-14062 Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: chainctl, tw, cg...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, envoy-gateway, ocm-kubernetes-controller, tw, cluster-api-helm-controller-fips, crossplane, kyverno-notation-aws-fips, falcoctl, falcoctl-fips, commercial-kyverno, kyverno, linkerd2, trivy, k8ssandra-client, helm-operator-fips,...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: pluto, chartmuseum, kubescape, cert-manager-cmctl, zot, rancher-helm, zarf, cluster-api-helm-controller, eksctl, flux-helm-controller, tw, helm-docs, chart-testing, k9s, kots, flux-source-controller, helm-operator, flux, trivy, helm-push, k8ssandra-client, cilium-cli...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, chartmuseum, kubescape, cert-manager-cmctl, zot, rancher-helm, zarf, cluster-api-helm-controller, eksctl, flux-helm-controller, tw, helm-docs, chart-testing, k9s, kots, flux-source-controller, helm-operator, flux, trivy, helm-push, k8ssandra-client, cilium-cli...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, chartmuseum, cert-manager-cmctl, zot, envoy-gateway, linkerd2, rancher-helm, cluster-api-helm-controller, zarf, eksctl, flux-helm-controller, k8sgpt, tw, helm-docs, chart-testing, k9s, kots, flux-source-controller, rancher-fleet, cerbos, helm-operator, trivy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cloudflared, pulumi-language-yaml, terraform-provider-tls, kaf, spire-server, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, prometheus-operator, zarf, cloud-provider-aws,...

PT-2026-71993

Name of the Vulnerable Software and Affected Versions Grav API plugin getgrav/grav-plugin-api versions prior to 1.0.13 Description An API key scope-cap bypass exists in the guardTwigContent function within PagesController. The issue occurs because the Twig-toggle check relies on a basic...

MAL-2026-6508 Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: buildah-fips, crossplane-provider-aws-s3, crossplane-provider-terraform-fips, kubernetes-csi-livenessprobe, crossplane-provider-aws-autoscaling, crossplane-provider-azure-servicelinker, aws-fsx-csi-driver-fips, policy-controller, flux-fips,...

Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

MAL-2026-5935 Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...