CLEANSTART-2026-KB76878 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written

Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the numwritten value. This vulnerability could allow malicious VIO...

CVE-2026-22732

CVE-2026-22732 affects Spring Security; multiple non-legacy branches are impacted where HTTP response headers for servlet applications may not be written. Affected versions include 5.7.0–5.7.21, 5.8.0–5.8.23, 6.3.0–6.3.14, 6.4.0–6.4.14, 6.5.0–6.5.8, and 7.0.0–7.0.3. The description indicates a he...

CVE-2026-22732: Direct Request

When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. This issue affects Spring Security Servlet applications using lazy default writing of HTTP Headers: : from 5.7.0 through 5.7.21, from...

EUVD-2025-205528

A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration file. The attack is possible to be carried out remotely. The...

EUVD-2025-93950

Malicious code in writtenflyingfishz3n npm...

EUVD-2025-79990

Malicious code in writtenstingray0xrequest npm...

EUVD-2025-79993

Malicious code in writtenminnow0xrequest npm...

EUVD-2025-71284

Malicious code in writtengamefowlz3n npm...

Malicious code in written_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec72d93b2eac40b7e8c8f064373d979cd894a76788e314fd207a964e613bbd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5def8db598be2865da89a5fd65fcc5ad1eda1be8e798870ae5d10691a24b047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61730

Malicious code in writtenmeerkatz3n npm...

EUVD-2025-61729

Malicious code in writtenpelicanz3n npm...

EUVD-2025-61728

Malicious code in writtentroutz3n npm...

EUVD-2025-50999

Malicious code in written-brown-smelt npm...

EUVD-2025-50998

Malicious code in written-orange-gopher npm...

EUVD-2025-51001

Malicious code in written-amaranth-swift npm...

EUVD-2025-50997

Malicious code in written-sapphire-orca npm...

EUVD-2025-51000

Malicious code in written-azure-duck npm...

MAL-2025-71648 Malicious code in written-amaranth-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e93bbad3b50420eb9af948c2686b6d9934b28b7d8af905af919bf63f76f8c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...