npm - OSV

GHSA-qqj6-54q6-cxv6

Go/github.com/snowflakedb/gosnowflake
Go/github.com/snowflakedb/gosnowflake/v2
Maven/net.snowflake:snowflake-jdbc
Maven/net.snowflake:snowflake-jdbc-fips
Maven/net.snowflake:snowflake-jdbc-thin
... 2 more

Snowflake drivers writes sensitive information to logs 6 hours ago

Fix available
Severity - 6.5 (Medium)

GHSA-rvm3-566m-v7fv

Maven/com.capacitorjs:core
SwiftURL/github.com/ionic-team/capacitor-swift-pm
npm/@capacitor/android
npm/@capacitor/ios

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path 6 hours ago

Fix available
Severity - 9.3 (Critical)

MAL-2026-16381

npm/cisco-github-simple

Malicious code in cisco-github-simple (npm) 22 Sep

No fix available

MAL-2026-16265

npm/@kartyk-github-org/takedown-a

Malicious code in @kartyk-github-org/takedown-a (npm) 17 Sep

No fix available

MAL-2026-16266

npm/@kartyk-github-org/takedown-b

Malicious code in @kartyk-github-org/takedown-b (npm) 17 Sep

No fix available

MAL-2026-16245

npm/kartyk-github-single-ver-pkg

Malicious code in kartyk-github-single-ver-pkg (npm) 16 Sep

No fix available

MAL-2026-16246

npm/kartyk-github-token-pkg

Malicious code in kartyk-github-token-pkg (npm) 16 Sep

No fix available

MAL-2026-16244

npm/kartyk-github-oidc-test-pkg

Malicious code in kartyk-github-oidc-test-pkg (npm) 16 Sep

No fix available

MAL-2026-14245

npm/github-policy-bot

Malicious code in github-policy-bot (npm) 19 Aug

No fix available

MAL-2026-12389

npm/github-app-sts-action

Malicious code in github-app-sts-action (npm) 05 Aug

No fix available

GHSA-464c-974j-9xm6

Go/github.com/aws/aws-cdk-go/awscdk
Go/github.com/aws/aws-cdk-go/awscdk/v2
Maven/software.amazon.awscdk:aws-cdk-lib
Maven/software.amazon.awscdk:codebuild
NuGet/Amazon.CDK.AWS.CodeBuild
... 5 more

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 24 Jul

Fix available
Severity - 3.3 (Low)

MAL-2026-6052

npm/@mastra/github-signals

Malicious code in @mastra/github-signals (npm) 17 Jun

No fix available

MAL-2026-5479

npm/mcp-server-github

Malicious code in mcp-server-github (npm) 09 Jun

No fix available

MAL-2026-5259

npm/github-archiver

Malicious code in github-archiver (npm) 05 Jun

No fix available

MAL-2026-5107

npm/cms-github

Malicious code in cms-github (npm) 01 Jun

No fix available

GHSA-f396-4rp4-7v2j

Go/github.com/boxlite-ai/boxlite/sdks/go
PyPI/boxlite
crates.io/boxlite
crates.io/boxlite-cli
npm/@boxlite-ai/boxlite

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host 21 May

Fix available
Severity - 9.6 (Critical)

Vulnerabilities