MAL-2026-15858 Malicious code in trongridi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7377339f830834c0b61f370dd642f368374d9551b8b51822d79a902b4b403103 The package exposes a single public function permprivatekey that POSTs the caller-supplied TRON wallet private key as JSON to the hardcoded endpoint...

Resource Exhaustion

Spring Batch is vulnerable to resource exhaustion. The vulnerability is due to the way FlatFileItemReader assembles multi-line records, where a specially crafted input file can cause excessive CPU consumption and memory usage, leading the batch job to stall or run out of memory...

Fedora 45 : dracut (2026-5bf73fe397)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5bf73fe397 advisory. - fixdevicetree-firmware: include soc specific firmwares in installgeneric - fixdevicetree-firmware: include Qualcomm X2 laptop model specific firmwares -...

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in its document outline retrieval, which processes outline entries and nested outline paths without bounding t...

CVE-2026-84310 pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-83615

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

SUSE CVE-2026-72260

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pmruntimegetsync without checking the return value. If...

CVE-2026-82909: Insufficient Session Expiration

A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote...

org.graylog.plugins:usage-statistics (2.0.0-alpha.5) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-alpha.5)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.5 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.2)

org.graylog2:graylog2-server MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.2 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (>=1.1.2, <=2.1.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.2)

org.graylog2:graylog2-server MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.1.2, =2.1.2 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.2 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.2 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-rc.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-rc.1 Source cves: CVE-2026-55841 Source advisory:...