Malicious code in @webapp-next/store (npm)

Source: amazon-inspector cbad3803cdda40845fe2aa64e0963b9293f9ee523b3f9205a354da2ae1e317bf package.json declares "preinstall": "node index.js", which runs automatically on npm install. index.js collects os.hostname, os.platform, os.arch, os.homedir, os.userInfo username, uid, gid, shell, OS...

Malicious Package

Overview @webapp-next/store is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

ROS-20260722-73-0021

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

appdaemon (>=4.0.6, <=4.0.8), askbob (>=0.0.3, <=0.0.4) +23 more potentially affected by CVE-2026-48802 via python-engineio (3.13.2)

python-engineio PYPI version 3.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - appdaemon =4.0.6, =0.0.3, =2.20.0, =0.1.8.1, =0.2.4, =0.2.0, =20.10.0, =20.10.0, =20.10.0, =20.10.0, =20.10.0, =20.10.0, =20.10.0...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.24-0.1.hum1 noarch tomcat11-admin-webapps-11.0.24-0.1.hum1 noarch tomcat11-common-11.0.24-0.1.hum1 noarch tomcat11-docs-webapp-11.0.24-0.1.hum1 noarch...

org.dspace:dspace-jspui-api (1.5.0-beta2), org.dspace:dspace-jspui-webapp (1.5.0-beta2) +8 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.5.0-beta2)

org.dspace:dspace-api MAVEN version 1.5.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0-beta2 - org.dspace:dspace-jspui-webapp 1.5.0-beta2 - org.dspace:dspace-lni-co...

org.dspace:dspace-jspui-api (1.5.1-beta), org.dspace:dspace-jspui-webapp (1.5.1-beta) +8 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.5.1-beta)

org.dspace:dspace-api MAVEN version 1.5.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.1-beta - org.dspace:dspace-jspui-webapp 1.5.1-beta - org.dspace:dspace-lni-core...

org.dspace:dspace-jspui-api (1.5.1), org.dspace:dspace-jspui-webapp (1.5.1) +8 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.5.1)

org.dspace:dspace-api MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.1 - org.dspace:dspace-jspui-webapp 1.5.1 - org.dspace:dspace-lni-core 1.5.1 -...

org.dspace:dspace-jspui-api (1.5.2), org.dspace:dspace-jspui-webapp (1.5.2) +8 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.5.2)

org.dspace:dspace-api MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2 - org.dspace:dspace-jspui-webapp 1.5.2 - org.dspace:dspace-lni-core 1.5.2 -...

org.dspace.discovery:discovery-demo-webapp (0.9.2), org.dspace.discovery:discovery-solr-provider (0.9.2) +14 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.6.0)

org.dspace:dspace-api MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.discovery:discovery-demo-webapp 0.9.2 - org.dspace.discovery:discovery-solr-provider 0.9.2 -...

org.dspace:dspace-jspui-api (1.6.1), org.dspace:dspace-jspui-webapp (1.6.1) +9 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.6.1)

org.dspace:dspace-api MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.6.1 - org.dspace:dspace-jspui-webapp 1.6.1 - org.dspace:dspace-lni-core 1.6.1 -...

org.dspace:dspace-discovery-provider (1.7.0-rc1), org.dspace:dspace-discovery-xmlui-api (1.7.0-rc1) +13 more potentially affected by CVE-2026-49830 via org.dspace:dspace-api (1.7.0-rc1)

org.dspace:dspace-api MAVEN version 1.7.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-discovery-provider 1.7.0-rc1 - org.dspace:dspace-discovery-xmlui-api 1.7.0-rc1 -...

org.dspace:dspace-jspui-api (1.5.0-beta2), org.dspace:dspace-jspui-webapp (1.5.0-beta2) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.0-beta2)

org.dspace:dspace-api MAVEN version 1.5.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0-beta2 - org.dspace:dspace-jspui-webapp 1.5.0-beta2 - org.dspace:dspace-lni-co...

org.dspace:dspace-jspui-api (1.5.0), org.dspace:dspace-jspui-webapp (1.5.0) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.0)

org.dspace:dspace-api MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0 - org.dspace:dspace-jspui-webapp 1.5.0 - org.dspace:dspace-lni-core 1.5.0 -...

org.dspace:dspace-jspui-api (1.5.1), org.dspace:dspace-jspui-webapp (1.5.1) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.1)

org.dspace:dspace-api MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.1 - org.dspace:dspace-jspui-webapp 1.5.1 - org.dspace:dspace-lni-core 1.5.1 -...

org.dspace:dspace-jspui-api (1.5.2-rc2), org.dspace:dspace-jspui-webapp (1.5.2-rc2) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.2-rc2)

org.dspace:dspace-api MAVEN version 1.5.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2-rc2 - org.dspace:dspace-jspui-webapp 1.5.2-rc2 - org.dspace:dspace-lni-core...

org.dspace:dspace-jspui-api (1.5.2), org.dspace:dspace-jspui-webapp (1.5.2) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.2)

org.dspace:dspace-api MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2 - org.dspace:dspace-jspui-webapp 1.5.2 - org.dspace:dspace-lni-core 1.5.2 -...

org.dspace:dspace-jspui-api (1.6.0-rc2), org.dspace:dspace-jspui-webapp (1.6.0-rc2) +9 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.6.0-rc2)

org.dspace:dspace-api MAVEN version 1.6.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.6.0-rc2 - org.dspace:dspace-jspui-webapp 1.6.0-rc2 - org.dspace:dspace-lni-core...

org.dspace.discovery:discovery-demo-webapp (0.9.2), org.dspace.discovery:discovery-solr-provider (0.9.2) +14 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.6.0)

org.dspace:dspace-api MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.discovery:discovery-demo-webapp 0.9.2 - org.dspace.discovery:discovery-solr-provider 0.9.2 -...