Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-7059 Malicious code in @cashback/how-it-works-widget (npm)
Malicious code in @cashback/how-it-works-widget (npm)
MAL-2026-7058 Malicious code in @cashback/auth (npm)
Malicious code in @cashback/auth (npm)
MAL-2026-7057 Malicious code in @buglab/pino-pretty-logger (npm)
Malicious code in @buglab/pino-pretty-logger (npm)
MAL-2026-7056 Malicious code in @bmg-web/bmg-styles (npm)
Malicious code in @bmg-web/bmg-styles (npm)
MAL-2026-7055 Malicious code in @bmg-web/bmg-spinner (npm)
Malicious code in @bmg-web/bmg-spinner (npm)
MAL-2026-7054 Malicious code in @bmg-web/bmg-snackbar (npm)
Malicious code in @bmg-web/bmg-snackbar (npm)
MAL-2026-7053 Malicious code in @bmg-web/bmg-review-basket (npm)
Malicious code in @bmg-web/bmg-review-basket (npm)
MAL-2026-7052 Malicious code in @bmg-web/bmg-multiselect (npm)
Malicious code in @bmg-web/bmg-multiselect (npm)
MAL-2026-7051 Malicious code in @bmg-web/bmg-key-value (npm)
Malicious code in @bmg-web/bmg-key-value (npm)
MAL-2026-7050 Malicious code in @bmg-web/bmg-core (npm)
Malicious code in @bmg-web/bmg-core (npm)
MAL-2026-7049 Malicious code in @athena-ui-components/utils (npm)
Malicious code in @athena-ui-components/utils (npm)
MAL-2026-7048 Malicious code in @athena-ui-components/user-activity (npm)
Malicious code in @athena-ui-components/user-activity (npm)
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
Malicious code in @athena-ui-components/pubsub-bridge (npm)
MAL-2026-7046 Malicious code in @athena-ui-components/layout (npm)
Malicious code in @athena-ui-components/layout (npm)
MAL-2026-7045 Malicious code in @athena-ui-components/lang (npm)
Malicious code in @athena-ui-components/lang (npm)
MAL-2026-7044 Malicious code in @athena-ui-components/hooks (npm)
Malicious code in @athena-ui-components/hooks (npm)
MAL-2026-7043 Malicious code in @athena-ui-components/helpers (npm)
Malicious code in @athena-ui-components/helpers (npm)
MAL-2026-7042 Malicious code in @athena-ui-components/graceful-degradation (npm)
Malicious code in @athena-ui-components/graceful-degradation (npm)
MAL-2026-7041 Malicious code in @asurion-core/eventualize-react-b (npm)
Malicious code in @asurion-core/eventualize-react-b (npm)
MAL-2026-7040 Malicious code in @asurion-core/eventualize-react- (npm)
Malicious code in @asurion-core/eventualize-react- (npm)
MAL-2026-7039 Malicious code in @apps-locations/events (npm)
Malicious code in @apps-locations/events (npm)
MAL-2026-7038 Malicious code in @apps-legacy-reports/events (npm)
Malicious code in @apps-legacy-reports/events (npm)
MAL-2026-7037 Malicious code in @applicationbuildingcenter/xcube-schema (npm)
Malicious code in @applicationbuildingcenter/xcube-schema (npm)
MAL-2026-7036 Malicious code in @app-tray-ui/stencil-component (npm)
Malicious code in @app-tray-ui/stencil-component (npm)
MAL-2026-7035 Malicious code in @aoflcorp/freighter (npm)
Malicious code in @aoflcorp/freighter (npm)
MAL-2026-7034 Malicious code in @alphasedboy/game (npm)
Malicious code in @alphasedboy/game (npm)
MAL-2026-7033 Malicious code in @2011-08-19/n (npm)
Malicious code in @2011-08-19/n (npm)
RLSA-2026:35826 Vulnerability in grafana-pcp (RLSA-2026:35826)
vulnerability in grafana-pcp (RLSA-2026:35826). Confidential information can be exposed externally. Mitigation: upgrade to `0:5.3.0-7.el10_2` or later.
RLSA-2026:33731 Vulnerability in rrdtool (RLSA-2026:33731)
vulnerability in rrdtool (RLSA-2026:33731). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.8.0-21.el10_2` or later.
RLSA-2026:35832 Vulnerability in golang-github-openprinting-ipp-usb (RLSA-2026:35832)
vulnerability in golang-github-openprinting-ipp-usb (RLSA-2026:35832). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:0.9.27-7.el10_2.2` or later.
RLSA-2026:34109 Vulnerability in httpd (RLSA-2026:34109)
vulnerability in httpd (RLSA-2026:34109). Data can be tampered with by attackers. Mitigation: upgrade to `0:2.4.63-13.el10_2.4` or later.
RLSA-2026:35827 Vulnerability in grafana (RLSA-2026:35827)
vulnerability in grafana (RLSA-2026:35827). Confidential information can be exposed externally. Mitigation: upgrade to `0:10.2.6-27.el10_2` or later.
RLSA-2026:34355 Vulnerability in mod_http2 (RLSA-2026:34355)
vulnerability in mod_http2 (RLSA-2026:34355). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.0.29-4.el10_2.2` or later.
RLSA-2026:34357 Vulnerability in opentelemetry-collector (RLSA-2026:34357)
vulnerability in opentelemetry-collector (RLSA-2026:34357). Confidential information can be exposed externally. Mitigation: upgrade to `0:0.152.1-1.el10_2` or later.
RLSA-2026:35828 Vulnerability in grafana (RLSA-2026:35828)
vulnerability in grafana (RLSA-2026:35828). Confidential information can be exposed externally. Mitigation: upgrade to `0:10.2.6-23.el9_8` or later.
RLSA-2026:35829 Vulnerability in grafana-pcp (RLSA-2026:35829)
vulnerability in grafana-pcp (RLSA-2026:35829). Confidential information can be exposed externally. Mitigation: upgrade to `0:5.1.1-17.el9_8` or later.
CVE-2026-57825 Vulnerability in opam-devel (CVE-2026-57825)
vulnerability in opam-devel (CVE-2026-57825). Data can be tampered with by attackers. Exploitable via ``test``. Mitigation: upgrade to `2.5.2, 09c3df1ffb33cc0a09b3a81f36bb74898dce2120, 248f8400e5ecb6ecbd7a672448477d08cedfdc24` or later.
MAL-2026-7466 Malicious code in scan-checker (PyPI)
Malicious code in scan-checker (PyPI)
MAL-2026-7467 Malicious code in scanvia (PyPI)
Malicious code in scanvia (PyPI)
MAL-2026-7465 Malicious code in quatre (PyPI)
Malicious code in quatre (PyPI)
MAL-2026-7464 Malicious code in pygremlinbox-malware-network-indicators (PyPI)
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
MAL-2026-7463 Malicious code in pygremlinbox-malware-install-execution (PyPI)
Malicious code in pygremlinbox-malware-install-execution (PyPI)
MAL-2026-7462 Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
MAL-2026-7461 Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
MAL-2026-7460 Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
MAL-2026-7459 Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
MAL-2026-7457 Malicious code in piirgg (PyPI)
Malicious code in piirgg (PyPI)
MAL-2026-7456 Malicious code in notrandompacketname (PyPI)
Malicious code in notrandompacketname (PyPI)
MAL-2026-7455 Malicious code in myproject234 (PyPI)
Malicious code in myproject234 (PyPI)
MAL-2026-7454 Malicious code in cyberday26szymon-payments (PyPI)
Malicious code in cyberday26szymon-payments (PyPI)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →