CVE-2026-45809

A flaw was found in OpenSIPS, a Session Initiation Protocol SIP server. A remote attacker can cause a Denial of Service DoS by sending a SUBSCRIBE Event: presence request with an excessively long 'From' Uniform Resource Identifier URI. This action creates an oversized watcher entry. When the syst...

CVE-2026-45809

OpenSIPS denial-of-service in watcherinfo XML generation (CVE-2026-45809). Affected: OpenSIPS before 3.6.6 and 4.0.0-rc1. Root cause: copying the stored watcher URI into a fixed-size stack buffer during presence.winfo watcherinfo XML generation when an oversized watcher entry is created by a long...

CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...

PT-2026-63312

Name of the Vulnerable Software and Affected Versions Gitea versions 1.25.4 through 2026-05-16 Description When a public repository is changed to private via the REST API, watch records are not properly cleared. This occurs because the updateRepository function, which is utilized by the PATCH...

BoxLite has a Timeout Bypass Vulnerability

Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...

GHSA-XJHV-PP2R-6F82 BoxLite has a Timeout Bypass Vulnerability

Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...

Malicious Package

Overview @service-suppliers/select-supplier-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview @service-suppliers/fetch-suppliers-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38be804fe779ace5ea3a6a56214beebe7ceabaa5f765b46a0f7888ed2da4fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @service-suppliers/fetch-initial-suppliers-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

MAL-2026-4436 Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3829c1a8be4ed51ad5c9d714d223cb037f7d76df868b73e63c69c6c60ff8dbf3 On npm install, scripts/postinstall.js fetches a platform-specific script from https://oob.moika.tech/payload/linux|mac|win, writes it to the OS temp...

[SECURITY] Fedora 42 Update: awatcher-0.3.3-2.fc42

A window activity and idle watcher...

[SECURITY] Fedora 43 Update: awatcher-0.3.3-2.fc43

A window activity and idle watcher...

[SECURITY] Fedora 44 Update: awatcher-0.3.3-2.fc44

A window activity and idle watcher...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, terraform-fips, external-dns, terraform, net-kourier-fips, flux-source-watcher, cloud-provider-aws, elastic-agent, tekton-pipelines-fips, etcd, knative-operator-fips, rke2-runtime-fips, backup-restore-operator, gitaly-fips, hubble, traefik-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, terraform-fips, external-dns, terraform, net-kourier-fips, flux-source-watcher, cloud-provider-aws, elastic-agent, tekton-pipelines-fips, etcd, knative-operator-fips, rke2-runtime-fips, backup-restore-operator, gitaly-fips, hubble, traefik-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, pgwatch, flux-source-watcher, kubernetes-dashboard-metrics-scraper-fips, volume-modifier-for-k8s, aws-load-balancer-controller, tailscale, kubernetes-dashboard-web-fips, oras-fips, flux-image-automation-controller-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, pgwatch, flux-source-watcher, kubernetes-dashboard-metrics-scraper-fips, volume-modifier-for-k8s, aws-load-balancer-controller, tailscale, kubernetes-dashboard-web-fips, oras-fips, flux-image-automation-controller-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitea-fips, weaviate, external-dns, spegel-fips, tekton-pipelines-fips, ko-fips, traefik-fips, kaf, cluster-autoscaler, seaweedfs, malcontent, kubernetes-csi-node-driver-registrar, trivy-fips, cephcsi-fips, dex, rancher-helm, syncthing, xeol-fip...