SUSE: Security Advisory (SUSE-SU-2026:1290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the user name field. An attacker can execute arbitrary code in the context of any user who passively visits a comment page by injecting malicious scripts. Details Cross-site scripting or XSS is a code...

Linux Distros Unpatched Vulnerability : CVE-2026-31933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting...

@waigenie/mobile-mcp (0.0.16) potentially affected by CVE-2026-33989 via @mobilenext/mobile-mcp (0.0.12)

@mobilenext/mobile-mcp NPM version 0.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on @mobilenext/mobile-mcp and may be impacted: - @waigenie/mobile-mcp 0.0.16 Source cves: CVE-2026-33989 Source advisory: SNYK:JS-MOBILENEXTMOBILEMCP-15874414...

@omchat/common (>=1.0.0, <=1.0.4), @tverse/ui (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-33979 via express-xss-sanitizer (1.2.1)

express-xss-sanitizer NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-xss-sanitizer and may be impacted: - @omchat/common =1.0.0, =0.1.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2026-33979 Source advisory:...

@agentholdings/agent-passport (0.1.0), @flomesh/ztm-chat (>=2026.3.25, <=2026.3.26) +9 more potentially affected by CVE-2026-35632 via openclaw (>=2026.3.22, <=2026.3.23-2)

openclaw NPM version =2026.3.22, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-35632 Source advisory: SNYK:JS-OPENCLAW-15797933...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-32846 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-32846 Source advisory: OSV:GHSA-HGGM-X7R9-MM7V...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +27 more potentially affected by CVE-2026-33750 via brace-expansion (>=1.1.0, <=1.1.11)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =0.0.3, =0.0.1, =0.1.0 and more Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...

03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2903 more potentially affected by CVE-2026-33750 via brace-expansion (>=4.0.0, <=5.0.2)

brace-expansion NPM version =4.0.0, =0.0.4, =1.1.7, =1.1.8 - @angranit/fantom-virma 0.1.0 - @angranit/first-step-to-get-tea 0.1.0 - @angranit/hapeipons 1.1.2 - @angranit/nearly-vm 0.1.0 - @angranit/newme-project 0.1.0 - @angranit/npmjs-for-tea-project 0.1.0 - @angranit/phantompirs 0.1.0 -...

@100x/application (>=0.0.1, <=0.0.6), @abysslabs/cli (>=0.0.1, <=0.0.2) +250 more potentially affected by CVE-2026-33732 via srvx (>=0.1.4, <=0.11.12)

srvx NPM version =0.1.4, =0.0.1, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =1.0.0, =2.4.0-alpha.2, =2.4.0-alpha.2, =0.3.7, =0.3.10 and more Source cves: CVE-2026-33732 Source advisory: OSV:GHSA-P36Q-Q72M-GCHR...

Ubuntu: Security Advisory (USN-8098-8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.14.0, <=0.30.2) +17 more potentially affected by CVE-2026-33665 via @n8n/constants (>=0.2.0, <=0.13.0)

@n8n/constants NPM version =0.2.0, =1.0.1, =0.14.0, =0.3.0, =0.3.0, =0.5.0, =0.2.0, =1.1.0, =1.28.0, =1.90.0, =1.90.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.1 and more Source cves: CVE-2026-33665 Source advisory: SNYK:JS-N8NCONSTANTS-15837401...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +86 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (>=0.1.0, <=2.2.1)

node-tesseract-ocr NPM version =0.1.0, =1.0.10, =0.0.1, =2.3.50-snapshot-1724322551764, =2.0.0, =0.0.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2026-26832 Source advisory: SNYK:JS-NODETESSERACTOCR-15874141...

@aaquib/whatsasenanpm (1.3.5), @alexandersen01/sharepoint-mcp-server-better (0.3.23) +81 more potentially affected by CVE-2026-26832 via node-tesseract-ocr (2.2.1)

node-tesseract-ocr NPM version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-tesseract-ocr and may be impacted: - @aaquib/whatsasenanpm 1.3.5 - @alexandersen01/sharepoint-mcp-server-better 0.3.23 - @artdotstyle/filepix =1.0.10, =0.0.1,...

@atomicservice/ascf-toolkit (>=1.0.0, <=1.0.17), @atomicservice/ascf-toolkit-hvigor-plugin (>=1.0.1-beta.1, <=1.0.17) +77 more potentially affected by CVE-2026-4603 via jsrsasign (>=11.0.0, <=11.1.0)

jsrsasign NPM version =11.0.0, =1.0.0, =1.0.1-beta.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 - @citrineos/ocpi-charging-profiles 2.0.1 - @citrineos/ocpi-commands 2.0.1 - @citrineos/ocpi-credentials 2.0.1 - @citrineos/ocpi-locations 2.0.1 -...

Fedora: Security Advisory (FEDORA-2026-dec8f790f7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6175-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2026-1369)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2026-1422)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...