Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| mal-2026-16132 | Malicious code in @nimbusedge/auth (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16126 | Malicious code in strapi-plugin-vinsoc-1109 (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16118 | Malicious code in etoro-charts (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16117 | Malicious code in etoro-cashout (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16114 | Malicious code in etoro-auth (npm) | UNKNOWN | ossf_malicious_packages | unknown | |
| mal-2026-16112 | Malicious code in etoro-analytics (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16111 | Malicious code in etoro-aggregator (npm) | UNKNOWN | osv_npm | unknown | |
| ghsa-4c8g-83qw-93j6 | fast-uri vulnerable to host confusion via failed IDN canonicalization | UNKNOWN | 7.5 | ghsa | unknown |
| mal-2026-7017 | Malicious code in logger-daemon-regex (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16014 | Malicious code in prime-coding-agent (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16013 | Malicious code in agent-free (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11044 | Malicious code in tailwind-gutenberg-block-zero (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11043 | Malicious code in supplyhub (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11042 | Malicious code in faust-cont (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-6788 | Malicious code in datefmt-helper (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-4533 | Malicious code in codebuff-cli (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16012 | Malicious code in orbitron-cli (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-16011 | Malicious code in orbitron-tui (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-13933 | Malicious code in cc-skills-helper (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11499 | Malicious code in @types-beta/sdk (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11123 | Malicious code in @yancyyu/agentcli (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-11001 | Malicious code in date-format-utils-xz (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-10704 | Malicious code in @across-toolkit/typescript-config (npm) | UNKNOWN | osv_npm | unknown | |
| mal-2026-10115 | Malicious code in fmt-date-lite (npm) | UNKNOWN | osv_npm | unknown | |
| ghsa-4x45-gxvp-6283 | @argos-ci/core: CI Branch Name OS Command Injection | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-4qpv-39hg-f7fx | @jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission | UNKNOWN | 7.1 | ghsa | unknown |
| ghsa-qgpw-8g46-w95v | n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read | UNKNOWN | 5.3 | ghsa | unknown |
| ghsa-q5wm-mgqx-fv2f | n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content | UNKNOWN | 5.9 | ghsa | unknown |
| ghsa-hf57-cqmx-p4gr | OmniRoute ACP Custom-Agent Remote Code Execution (RCE) | UNKNOWN | 9.5 | ghsa | unknown |
| ghsa-cw9w-vv67-hf73 | n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution | UNKNOWN | 5.9 | ghsa | unknown |