OSV.dev · 实时热榜

Parse Server before 8.6.93 and 9.0.0 before 9.10.1 protectedFields Bypass via... Affected packages: Bitnami/parse Attributes: Fix available、Severity - 5.3 (Medium)

TuxCare security update for @angular/ssr (1 CVE) Affected packages: TuxCare:npm/@angular/ssr Attributes: Fix available

Affected packages: Debian:12/libplack-perl、Debian:13/libplack-perl、Debian:14/libplack-perl Attributes: No fix available

Affected packages: Debian:12/rtmpdump、Debian:13/rtmpdump、Debian:14/rtmpdump Attributes: No fix available

Affected packages: Debian:14/linux Attributes: Fix available

Affected packages: Echo/spatialite Attributes: No fix available

Affected packages: Echo/rtmpdump Attributes: No fix available

Affected packages: Echo/python-git Attributes: No fix available

Affected packages: Echo/libdvdnav Attributes: No fix available

Malicious code in @ostyado/baileys (npm) Affected packages: npm/@ostyado/baileys Attributes: No fix available

Malicious code in ichigo-baileys (npm) Affected packages: npm/ichigo-baileys Attributes: No fix available

Malicious code in @pkgship/frpc-linux-arm64 (npm) Affected packages: npm/@pkgship/frpc-linux-arm64 Attributes: No fix available

Malicious code in fabdeploycheck (PyPI) Affected packages: PyPI/fabdeploycheck Attributes: No fix available

Malicious code in @fmr-ap149494/apex-base-component (npm) Affected packages: npm/@fmr-ap149494/apex-base-component Attributes: No fix available

Malicious code in array-inline-transform (npm) Affected packages: npm/array-inline-transform Attributes: No fix available

Affected packages: MinimOS/weaviate-fips-1.37 Attributes: Fix available

Red Hat Security Advisory: nodejs22 security update Affected packages: Red Hat:enterprise_linux_eus:10.0/nodejs、Red Hat:enterprise_linux_eus:10.0/nodejs-debuginfo、Red Hat:enterprise_linux_eus:10.0/nodejs-devel、Red Hat:enterprise_linux_eus:10.0/nodejs-docs、Red Hat:enterprise_linux_eus:10.0/nodejs-full-i18n、... 6 more Attributes: Fix available、Severity - 7.5 (High)

CVE-2026-56864 in golang.org/x/mod - Patched by Root Affected packages: Root:Go/golang.org/x/mod、Root:Go/rootio-golang.org/x/mod Attributes: Fix available

AIKIDO-2026-612508 in nodemailer - Patched by Root Affected packages: Root:npm/@rootio/nodemailer、Root:npm/nodemailer Attributes: Fix available

CVE-2026-104854 in nx - Patched by Root Affected packages: Root:npm/@rootio/nx、Root:npm/nx Attributes: Fix available

CVE-2026-96748 in pymongo - Patched by Root Affected packages: Root:PyPI/pymongo Attributes: Fix available

CVE-2026-1642 in nginx - Patched by Root Affected packages: Root:Alpine:3.15/nginx、Root:Alpine:3.15/rootio-nginx Attributes: Fix available

CVE-2026-10536 in curl - Patched by Root Affected packages: Root:Alpine:3.22/curl、Root:Alpine:3.22/rootio-curl Attributes: Fix available

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1 GraphQL Schema... Affected packages: Bitnami/parse Attributes: Fix available、Severity - 6.3 (Medium)

TuxCare security update for @angular/ssr (1 CVE) Affected packages: TuxCare:npm/@angular/ssr Attributes: Fix available

Affected packages: Debian:12/libplack-perl、Debian:13/libplack-perl、Debian:14/libplack-perl Attributes: No fix available

Affected packages: Debian:12/lwip、Debian:13/lwip、Debian:14/lwip Attributes: No fix available

Affected packages: Debian:12/linux、Debian:13/linux、Debian:14/linux Attributes: Fix available

Affected packages: Echo/rtmpdump Attributes: No fix available

Affected packages: Echo/spatialite Attributes: No fix available

Affected packages: Echo/libdvdnav Attributes: No fix available

Malicious code in @fluxionii/baileys (npm) Affected packages: npm/@fluxionii/baileys Attributes: No fix available

Malicious code in fabtoolkit (PyPI) Affected packages: PyPI/fabtoolkit Attributes: No fix available

Malicious code in @fcsmc/commercial-analytics (npm) Affected packages: npm/@fcsmc/commercial-analytics Attributes: No fix available

Malicious code in aemath-baileys (npm) Affected packages: npm/aemath-baileys Attributes: No fix available

Malicious code in dsjklweuvhgsdcq (npm) Affected packages: npm/dsjklweuvhgsdcq Attributes: No fix available

Affected packages: MinimOS/weaviate-fips-1.37 Attributes: Fix available

Red Hat Security Advisory: wireshark security update Affected packages: Red Hat:enterprise_linux:10.2/wireshark、Red Hat:enterprise_linux:10.2/wireshark-cli、Red Hat:enterprise_linux:10.2/wireshark-cli-debuginfo、Red Hat:enterprise_linux:10.2/wireshark-debuginfo、Red Hat:enterprise_linux:10.2/wireshark-debugsource、... 1 more Attributes: Fix available、Severity - 8.1 (High)

CVE-2026-56851 in golang.org/x/text - Patched by Root Affected packages: Root:Go/golang.org/x/text、Root:Go/rootio-golang.org/x/text Attributes: Fix available

CVE-2026-56865 in golang.org/x/mod - Patched by Root Affected packages: Root:Go/golang.org/x/mod、Root:Go/rootio-golang.org/x/mod Attributes: Fix available

AIKIDO-2026-645479 in nodemailer - Patched by Root Affected packages: Root:npm/@rootio/nodemailer、Root:npm/nodemailer Attributes: Fix available

GHSA-w2vw-w76x-qr89 in nx - Patched by Root Affected packages: Root:npm/@rootio/nx、Root:npm/nx Attributes: Fix available

CVE-2026-27651 in nginx - Patched by Root Affected packages: Root:Alpine:3.15/nginx、Root:Alpine:3.15/rootio-nginx Attributes: Fix available

CVE-2026-11856 in curl - Patched by Root Affected packages: Root:Alpine:3.22/curl、Root:Alpine:3.22/rootio-curl Attributes: Fix available

Parse Server before 8.6.95 and 9.0.0 before 9.10.2 Denial of Service via File... Affected packages: Bitnami/parse Attributes: Fix available、Severity - 8.2 (High)

TuxCare security update for @angular/ssr (1 CVE) Affected packages: TuxCare:npm/@angular/ssr Attributes: Fix available

Affected packages: Debian:12/libplack-perl、Debian:13/libplack-perl、Debian:14/libplack-perl Attributes: No fix available

Affected packages: Debian:12/libstrophe、Debian:13/libstrophe、Debian:14/libstrophe Attributes: No fix available

Affected packages: Debian:14/linux Attributes: Fix available

Malicious code in aldi02-baileys (npm) Affected packages: npm/aldi02-baileys Attributes: No fix available