Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-18318
  • npm/@greenlake/mfe-login-url
 Malicious code in @greenlake/mfe-login-url (npm) 23 Oct
  • No fix available
CLSA-2026-1791841669
  • TuxCare:npm/parse-url
 TuxCare security update for parse-url (2 CVEs) 12 Oct
  • Fix available
RHBA-2026:14131
  • Red Hat:satellite:6.19::el9/ansible-collection-redhat-satellite
  • Red Hat:satellite:6.19::el9/ansible-collection-redhat-satellite_operations
  • Red Hat:satellite:6.19::el9/ansible-core
  • Red Hat:satellite:6.19::el9/ansible-lint
  • Red Hat:satellite:6.19::el9/ansible-runner
  • ... 1023 more
 Red Hat Bug Fix Advisory: Important: Satellite 6.19.0 new version release 07 Oct
  • Fix available
  • Severity - 5.6 (Medium)
DEBIAN-CVE-2026-82247
  • Debian:13/rust-gix-transport
  • Debian:13/rust-gix-url
  • Debian:14/rust-gix-transport
  • Debian:14/rust-gix-url
 See record for full details 28 Aug
  • Fix available
  • Severity - 8.7 (High)
UBUNTU-CVE-2026-82247
  • Ubuntu:24.04:LTS/rust-gix-transport
  • Ubuntu:24.04:LTS/rust-gix-url
  • Ubuntu:26.04:LTS/rust-gix-transport
  • Ubuntu:26.04:LTS/rust-gix-url
  • Ubuntu:26.10/rust-gix-transport
  • ... 1 more
 gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL... 28 Aug
  • No fix available
  • Severity - 8.7 (High)
MAL-2026-14538
  • npm/spotify-url-resolvers
 Malicious code in spotify-url-resolvers (npm) 26 Aug
  • No fix available
MAL-2026-14492
  • npm/spotify-url-infos
 Malicious code in spotify-url-infos (npm) 25 Aug
  • No fix available
MAL-2026-14487
  • npm/spotify-url-resolovela
 Malicious code in spotify-url-resolovela (npm) 25 Aug
  • No fix available
MAL-2026-13049
  • npm/boxy-get-retry-url
 Malicious code in boxy-get-retry-url (npm) 05 Aug
  • No fix available
MAL-2026-12619
  • npm/claims-get-base-url
 Malicious code in claims-get-base-url (npm) 05 Aug
  • No fix available
MAL-2026-12631
  • npm/claims-patch-url
 Malicious code in claims-patch-url (npm) 05 Aug
  • No fix available
MAL-2026-12641
  • npm/claims-replace-url-params
 Malicious code in claims-replace-url-params (npm) 05 Aug
  • No fix available
CLSA-2026-1776904628
  • TuxCare:npm/url-parse
 TuxCare security update for url-parse (6 CVEs) 04 Aug
  • Fix available
CLSA-2026-1773533798
  • TuxCare:npm/base64-url
 TuxCare security update for base64-url (1 CVE) 04 Aug
  • Fix available
RHSA-2026:7662
  • Red Hat:hummingbird:1/boost
  • Red Hat:hummingbird:1/boost-atomic
  • Red Hat:hummingbird:1/boost-b2
  • Red Hat:hummingbird:1/boost-build
  • Red Hat:hummingbird:1/boost-charconv
  • ... 45 more
 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 16 Jul
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-2631
  • PyPI/mcp-url-downloader
 mcp-url-downloader has a Server-Side Request Forgery issue 13 Jul
  • No fix available
  • Severity - 5.5 (Medium)
Load more...