Malicious code in utxo-set-utils (RubyGems)

RubyGems runs this gem's native extension script ext/utxo-set-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in wallet-crypto-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17615 Malicious code in wallet-crypto-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in blockchain-sync-utils (RubyGems)

RubyGems runs this gem's native extension script ext/blockchain-sync-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over...

MAL-2026-17588 Malicious code in blockchain-sync-utils (RubyGems)

RubyGems runs this gem's native extension script ext/blockchain-sync-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over...

Malicious code in crypto-key-utils (RubyGems)

RubyGems runs this gem's native extension script ext/crypto-key-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17586 Malicious code in bitcoin-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoin-address-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over...

MAL-2026-17594 Malicious code in crypto-key-utils (RubyGems)

RubyGems runs this gem's native extension script ext/crypto-key-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in bitcoin-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoin-address-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over...

MAL-2026-17590 Malicious code in coinmarket-utils (RubyGems)

RubyGems runs this gem's native extension script ext/coinmarket-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in coinmarket-utils (RubyGems)

RubyGems runs this gem's native extension script ext/coinmarket-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17598 Malicious code in eth-keystore-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-keystore-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17597 Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in css-a11y-contrast-utils (npm)

Source: amazon-inspector 85ad65ab7d49c4277898f5da5b5d45f3ec9cde46035bcf6416e3a95507ca1301 [email protected] is advertised as a WCAG contrast utility but ships no contrast code — index.js exports an empty object. The package instead defines a Proxy stub exposing identifiers from Wix's...

Malicious code in rgx33-css-grid-utils (npm)

Source: amazon-inspector 320488b79c9000782e398425aa1a2fddba7f29a487913bbb2fc2019405c078f5 The package is published as rgx33-css-grid-utils but exports a set of module keys matching Wix thunderbolt internal registries thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry,...

PT-2026-106267

Name of the Vulnerable Software and Affected Versions GraphQL Tools versions prior to 12.0.1 Description The mergeDeep function in the GraphQL Tools utils package fails to exclude proto , constructor, or prototype keys while recursively merging source objects. An unauthenticated client can alias...

PT-2026-106246

Name of the Vulnerable Software and Affected Versions Docling versions 2.91.0 through 2.131.0 Description The validate url safety function in docling/backend/utils/image resource loader.py performs a single IPv4 lookup to validate a hostname but subsequently allows the HTTP client to resolve and...

CVE-2026-105743: Time-of-check Time-of-use (TOCTOU) Race Condition

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validateurlsafety in docling/backend/utils/imageresourceloader.py validates a hostname with a single IPv4 lookup and then allows the HTTP clien...