CVE-2026-0907

Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

scalyc (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via scaly (>=0.0.2 <=0.0.5)

scaly CARGO version =0.0.2, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0080...

@daffaadev/baileys (=1.0.1), @daffaadev/baileyss (=1.0.0) potentially affected by unknown CVE via @daffadeveloper/signal-node (=0.0.1-security)

@daffadeveloper/signal-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @daffadeveloper/signal-node and may be impacted: - @daffaadev/baileys =1.0.1 - @daffaadev/baileyss =1.0.0 Source cves: unknown CVE Source advisory:...

@veramo/kv-store (>=6.0.0 <=6.0.2-next.57) potentially affected by unknown CVE via @veramo/core-types (>=6.0.0 <=6.0.2-next.57)

@veramo/core-types NPM version =6.0.0, =6.0.0, =6.0.2-next.57 Source cves: unknown CVE Source advisory: SNYK:JS-VERAMOCORETYPES-15032936...

SUSE CVE-2025-59464

A memory leak in Node.js's OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through...

@cenk1cenk2/renovate-config (>=2.0.0 <=2.3.148), @jamietanna/patch-testing (>=0.1.0 <=0.2.28) +9 more potentially affected by unknown CVE via renovate (>=31.97.3 <=40.21.2)

renovate NPM version =31.97.3, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =1.1.130, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927384...

@jamietanna/renovate-graph (=0.30.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (>=0.5.3 <=1.0.1) potentially affected by unknown CVE via renovate (>=39.60.0 <=40.21.2)

renovate NPM version =39.60.0, =0.5.3, =1.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927383...

@jamietanna/renovate-graph (>=0.24.0 <=0.30.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (>=0.5.1 <=1.0.1) potentially affected by unknown CVE via renovate (>=39.22.0 <=40.21.2)

renovate NPM version =39.22.0, =0.24.0, =0.5.1, =1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XV56-3WQ5-9997...

CVE-2026-0879

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

0.workspace (>=0.1.0 <=0.1.1), 18a58t9c-upload (>=1.0.0 <=1.0.3) +17966 more potentially affected by unknown CVE via aws-sdk (>=2.0.11 <=2.9.0)

aws-sdk NPM version =2.0.11, =0.1.0, =1.0.0, =0.21.0, =1.0.0, =1.0.0, =0.1.0, =3.6.0, =0.0.2, =0.3.0, =0.1.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J965-2QGJ-VJMQ...

aws-sqs-create-queue (=0.1.0), cobalt-aws (>=0.3.0 <=0.7.0) +4 more potentially affected by unknown CVE via aws-sdk-sqs (>=0.11.0 <=0.9.0)

aws-sdk-sqs CARGO version =0.11.0, =0.3.0, =1.3.0, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-manager (>=0.0.1 <=0.21.2), aws-sdk-manager (>=0.0.0 <=0.0.10) +2 more potentially affected by unknown CVE via aws-sdk-cloudwatchlogs (>=0.10.1 <=0.31.2)

aws-sdk-cloudwatchlogs CARGO version =0.10.1, =0.0.1, =0.0.0, =1.0.0, =1.0.4 - tracing-cloudwatch =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-greengrass-nucleus (>=0.0.1 <=0.0.2) potentially affected by unknown CVE via aws-sdk-greengrass (=0.8.0)

aws-sdk-greengrass CARGO version =0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sdk-greengrass and may be impacted: - aws-greengrass-nucleus =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-manager (>=0.0.18 <=0.21.2), ec2-search (>=0.14.0 <=0.14.1) potentially affected by unknown CVE via aws-sdk-autoscaling (>=0.18.0 <=0.9.0)

aws-sdk-autoscaling CARGO version =0.18.0, =0.0.18, =0.14.0, =0.14.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-sg-cleanup (>=0.1.0 <=0.1.3), ec2-search (>=0.14.0 <=0.14.1) potentially affected by unknown CVE via aws-sdk-elasticloadbalancingv2 (>=0.15.0 <=0.9.0)

aws-sdk-elasticloadbalancingv2 CARGO version =0.15.0, =0.1.0, =0.14.0, =0.14.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

query-rds-data (>=2.0.0 <=2.0.1) potentially affected by unknown CVE via aws-sdk-rdsdata (=0.15.0)

aws-sdk-rdsdata CARGO version =0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sdk-rdsdata and may be impacted: - query-rds-data =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

cobalt-aws (>=0.2.0 <=0.7.0) potentially affected by unknown CVE via aws-sdk-athena (>=0.13.0 <=0.9.0)

aws-sdk-athena CARGO version =0.13.0, =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

avalanche-config-installer (>=0.2.36 <=0.2.43), avalanche-installer (>=0.0.18 <=0.0.32) +14 more potentially affected by unknown CVE via aws-sdk-kms (>=0.10.1 <=0.26.0)

aws-sdk-kms CARGO version =0.10.1, =0.2.36, =0.0.18, =0.0.42, =0.0.24, =0.0.1, =0.4.0, =0.0.0, =0.0.46, =0.2.0, =0.1.0, =0.68.0, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

pipesns (=0.1.5) potentially affected by unknown CVE via aws-sdk-sns (=0.4.1)

aws-sdk-sns CARGO version =0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sdk-sns and may be impacted: - pipesns =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...