EUVD-2026-31689

Hackney has SSRF allowlist bypass in hackneyurl:normalize/2 via percent-encoded host...

EUVD-2026-36388

Vulnerability Title...

EUVD-2026-30900

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

EUVD-2026-22937

CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function...

EUVD-2026-9798

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-1986

Malicious code in @workleap-ai/shared npm...

EUVD-2025-202593

Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the downloadmedia method before using them in file path construction. When downloading media, if the user does not specify a custom filename...

EUVD-2025-201044

Malicious code in elf-stats-silvered-stocking-120 npm...

EUVD-2025-198643

Malicious code in @postman/tunnel-agent npm...

EUVD-2025-177578

Malicious code in node-config-commitlint-panspermia-superposition npm...

EUVD-2025-133192

Malicious code in teate-thy-sonic-fesdit npm...

EUVD-2025-140692

Malicious code in ksai-kais-ahakaolaji npm...

EUVD-2025-140214

Malicious code in mibasdah-natu-munfsa npm...

EUVD-2025-145333

Malicious code in latifakram npm...

EUVD-2025-114015

Malicious code in epimetheus-ganymede-native-superagent npm...

EUVD-2025-97578

Malicious code in joni-miebogor8-riris npm...

EUVD-2025-101071

Malicious code in bella-mendut1-riris npm...

EUVD-2025-100674

Malicious code in cici-oblok33-riris npm...

EUVD-2025-105423

Malicious code in fadhil-asinan79-breki npm...

EUVD-2025-106382

Malicious code in bella-mie24-breki npm...