CLEANSTART-2026-RN17986 Security fix for ghsa-vg35-5wq7-3x7w applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV82595 Security fix for ghsa-v98h-vmpc-fpqv applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NJ61543 Security fix for CVE-2026-47762 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UG66310 Security fix for ghsa-q742-qvgc-gc2f applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LJ04584 Security fix for CVE-2026-47761 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KI92427 Security fix for CVE-2026-47759 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AU53985 Security fix for ghsa-w879-237q-wc7r applied in: cfssl 1.5.0-r1, postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

ghsa-w879-237q-wc7r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CQ13514 Security fix for ghsa-q4h4-gmj2-qvw2 applied in: cfssl 1.5.0-r1, postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

ghsa-q4h4-gmj2-qvw2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF63101 Security fix for ghsa-9m57-25v3-79x9 applied in: postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

ghsa-9m57-25v3-79x9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SU14572 Security fix for ghsa-45gg-vh54-h5m9 applied in: cfssl 1.5.0-r1, postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

ghsa-45gg-vh54-h5m9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview tailwindcss-form-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview link-ui-i24n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview link-ui-i22n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview link-ui-i20n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-93371

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371

A command injection vulnerability exists in marcopiovanello/yt-dlp-web-ui up to v4 , specifically in the NewGenericDownload function within server/internal/downloaders/generic.go. Manipulation of the params argument allows a remote, unauthenticated attacker to execute arbitrary commands with no u...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

EUVD-2026-82640

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...