FreeRDP websocket_read_wstream() Disclosure DoS

The vulnerability of the websocketreadwstream function in the libfreerdp/core/gateway/websocket.c file of the RDP client FreeRDP is related to improper handling of invalid length parameters. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service...

aiohttp < 3.14.2 HTTP Request Smuggling

The version of aiohttp installed on the remote host is prior to 3.14.2. It is, therefore, affected by a request smuggling vulnerability: - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attac...

Malicious code in elephant-tusk-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbdcdca1756bee69586881547c9e63f555685a2e5e3daa68a9519987edd37a server.js starts an Express + WebSocket server via app.listenPORT,... with no host argument, defaulting the bind to 0.0.0.0, with fully open CORS...

MAL-2026-13445 Malicious code in elephant-tusk-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbdcdca1756bee69586881547c9e63f555685a2e5e3daa68a9519987edd37a server.js starts an Express + WebSocket server via app.listenPORT,... with no host argument, defaulting the bind to 0.0.0.0, with fully open CORS...

Authentication Bypass by Assumed-Immutable Data

Overview @neo4j/graphql is an A GraphQL to Cypher query execution layer for Neo4j and JavaScript GraphQL implementations Affected versions of this package are vulnerable to Authentication Bypass by Assumed-Immutable Data in the connectionParams.jwt process. An attacker can gain unauthorized acces...

DoS (Denial of Service) undici Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 11.3.8 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cause a...

Malicious code in @junyoung-kim/reins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f53adf4aaeaffcb1bf0698a8fcb748f12522321b24cf44802d0b9f1b441475 The reins CLI spawns a local pseudo-terminal via node-pty default /bin/bash or cmd.exe and bridges it bidirectionally to a hardcoded WebSocket endpoi...

DoS (Denial of Service) undici Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 11.3.8 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker t...

CVE-2026-54463

A flaw was found in websocket-driver, a WebSocket protocol handler. A remote attacker could exploit a vulnerability in how draft versions of the WebSocket protocol handle length headers. By sending an indefinite sequence of specially crafted bytes, an attacker can cause the affected component to...

CVE-2026-5423

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JW...

CVE-2026-18276

Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event stream and observe another user's segmentation, transcription, import, export and training activity via the objectcls and objectpk values...

CVE-2026-54465

A flaw was found in websocket-driver, a WebSocket protocol handler. A remote attacker can exploit this vulnerability by sending an HTTP request or response with a never-ending list of headers to a server or client using websocket-driver. This can cause the receiving process to consume an unbounde...

Malicious code in agenthub-multiagent-mcp (npm)

Source: amazon-inspector ca33b55b94f99f1de3d4b34ee5fc42941013cc5ab1f94dce49b6cc0bed5eaa9a agenthub-multiagent-mcp ships a worker dist/worker.js that opens a WebSocket to the hardcoded server wss://agenthub.contetial.com/ws/workers/ and, for every 'dispatch' message received, writes the...

Malicious code in @xiaohhhh1/canvas-agent (npm)

Source: amazon-inspector 40162697638de6a974c2f7408ccf190f6d5b5f7ea82e5e52bbc9cb2a013fab08 On starting the package's bin, the agent opens an outbound WebSocket to wss://canvas.xiaohhhh1.com/api/agent-relay and forwards inbound relay messages as authenticated HTTP requests to its own local server,...

Malicious code in @aubea/mars (npm)

Source: amazon-inspector bdc44d9f879ce07c857e122c24664d6ae0445cb55aceeeb12c898d65898f7617 When invoked as its CLI npx @aubea/mars, the package opens a WebSocket connection to a hardcoded third-party relay at wss://cho100.cn/mars-relay and forwards messages received from a paired remote endpoint...

Malicious code in @ccfly/setup-linux-x64 (npm)

Source: amazon-inspector 33138ee17148f975a7c0b34f5d6ee1a4ad082395b87872dc91de0778130b91c8 The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/creack/pty PTY spawning and github.com/gorilla/websocket WebSocket client, and contains...

Malicious code in @ccfly/setup-darwin-x64 (npm)

Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcoded remote broker at cc.hn / ccfly over WebSocket ws://ccfl...

Malicious code in @ccfly/setup-linux-arm64 (npm)

Source: amazon-inspector faefd7405c377b2260ca4d731c9234a294d8d07b559646b8fc58be5488906eec The package ships a 6.3 MB linux/arm64 Go binary at bin/ccfly-setup. The binary embeds github.com/creack/pty PTY spawner and github.com/gorilla/websocket alongside internal packages...

Malicious code in @love-moon/conductor-cli (npm)

Source: amazon-inspector 7ea5d4f1af0a0b67e6f74bfb45867ce0b33136083138e3c23a56df03d8b5c902 The conductor daemon command bin/conductor-daemon.js - src/daemon.js opens a WebSocket to https://conductor.conductor-ai.top or a user-configured backendurl and registers a message handler that, in...

CVE-2026-5423

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JW...