FLAT-7TKIPÂ (GHSA-47w9-6r3f-938g)
Improper authorization control for web services In github.com/canonical/lxd
6.1
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-BDKUHÂ (GHSA-7mr3-28h5-m5vx)
Improper authorization control for web services In github.com/canonical/lxd
5.7
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-QIP9YÂ (GHSA-qx75-2p3r-pwm5)
Improper authorization control for web services In github.com/canonical/lxd
3.8
Low
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-VRL6MÂ (CVE-2026-55649)
Server side cross-site scripting In geonode
5.0
Medium
Ecosystem: PyPI
Component: geonode
FLAT-E8JIQÂ (CVE-2026-46429)
Insecure file upload In geonode
5.1
Medium
Ecosystem: PyPI
Component: geonode
FLAT-E2VO0Â (CVE-2026-33050)
OS Command Injection In geonode
4.4
Medium
Ecosystem: PyPI
Component: geonode
FLAT-2GEFNÂ (CVE-2026-9639)
Asymmetric denial of service In github.com/canonical/lxd
4.9
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-EZ4WMÂ (GHSA-pjff-c2wc-f6jm)
Lack of data validation In github.com/canonical/lxd
6.1
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-916CCÂ (GHSA-fmc8-p6q7-75cc)
Lack of data validation In github.com/canonical/lxd
6.1
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-8MBC7Â (GHSA-vghh-5rfx-xhq8)
Lack of data validation - Path Traversal In github.com/canonical/lxd
7.7
High
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-NPW9JÂ (GHSA-jpf8-86f3-wp38)
Lack of data validation - Path Traversal In github.com/canonical/lxd
6.1
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-YUY2LÂ (GHSA-9j25-mm2h-2f76)
Lack of data validation - Path Traversal In github.com/canonical/lxd
4.6
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-7XRJJÂ (CVE-2026-28385)
Server-side request forgery (SSRF) In github.com/canonical/lxd
1.3
Low
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-LITFHÂ (CVE-2026-62361)
SQL injection In github.com/knadh/listmonk
5.2
Medium
Ecosystem: Go
Component: github.com/knadh/listmonk
FLAT-L8WINÂ (CVE-2026-62284)
Remote command execution In github.com/osac-project/osac-operator
6.1
Medium
Ecosystem: Go
Component: github.com/osac-project/osac-operator
FLAT-GMYTFÂ (CVE-2026-16454)
Improper authorization control for web services In org.eclipse.hawkbit:hawkbit-ddi-resource
1.3
Low
Ecosystem: Maven
Component: org.eclipse.hawkbit:hawkbit-ddi-resource
FLAT-8UMTAÂ (MAL-2026-18732)
Use of software with malware In monobomber
5.2
Medium
Ecosystem: Npm
Component: monobomber
FLAT-GKDPKÂ (MAL-2026-18733)
Use of software with malware In monopw
5.2
Medium
Ecosystem: Npm
Component: monopw
FLAT-MQFCCÂ (MAL-2026-18734)
Use of software with malware In tw-motion-css
5.2
Medium
Ecosystem: Npm
Component: tw-motion-css
FLAT-3R7Z0Â (MAL-2026-18730)
Use of software with malware In wisdomtreetest
5.2
Medium
Ecosystem: Npm
Component: wisdomtreetest
FLAT-6Z84AÂ (MAL-2026-18725)
Use of software with malware In @ts-expect-error/n
5.2
Medium
Ecosystem: Npm
Component: @ts-expect-error/n
FLAT-LOKR5Â (MAL-2026-18723)
Use of software with malware In @sideeffects/n
5.2
Medium
Ecosystem: Npm
Component: @sideeffects/n
FLAT-0O9CEÂ (MAL-2026-18722)
Use of software with malware In @noinheritdoc/n
5.2
Medium
Ecosystem: Npm
Component: @noinheritdoc/n
FLAT-II8DJÂ (MAL-2026-18724)
Use of software with malware In @site-cms/ssr
5.2
Medium
Ecosystem: Npm
Component: @site-cms/ssr
FLAT-2ORCLÂ (MAL-2026-18721)
Use of software with malware In @needsaudit/nexport
5.2
Medium
Ecosystem: Npm
Component: @needsaudit/nexport
FLAT-Q6DHCÂ (MAL-2026-18720)
Use of software with malware In @needsaudit/n
5.2
Medium
Ecosystem: Npm
Component: @needsaudit/n
FLAT-LJ9POÂ (MAL-2026-18731)
Use of software with malware In zero2-baileys
5.2
Medium
Ecosystem: Npm
Component: zero2-baileys
FLAT-WJUPDÂ (MAL-2026-18727)
Use of software with malware In evmos-contracts
5.2
Medium
Ecosystem: Npm
Component: evmos-contracts
FLAT-GFBSYÂ (MAL-2026-18726)
Use of software with malware In arc-contracts
5.2
Medium
Ecosystem: Npm
Component: arc-contracts
FLAT-SBU55Â (MAL-2026-18729)
Use of software with malware In securedrop-app
5.2
Medium
Ecosystem: Npm
Component: securedrop-app
FLAT-SXQ7YÂ (MAL-2026-18728)
Use of software with malware In kc-kline-chart
5.2
Medium
Ecosystem: Npm
Component: kc-kline-chart
FLAT-2XZBTÂ (GHSA-2q7f-mf9f-5qhr)
HTTP request smuggling In actix-http
1.7
Low
Ecosystem: Cargo
Component: actix-http
FLAT-L3XNIÂ (GHSA-8hcm-m7r7-frwc)
Local file inclusion In actix-files
6.3
Medium
Ecosystem: Cargo
Component: actix-files
FLAT-9A1J9Â (GHSA-v27v-f96q-qhjq)
Insecure encryption algorithm In vodozemac
0.5
Low
Ecosystem: Cargo
Component: vodozemac
FLAT-89WJDÂ (GHSA-qph8-7859-gq2f)
Improper resource allocation In actix-web
2.3
Low
Ecosystem: Cargo
Component: actix-web
FLAT-CKWM6Â (GHSA-mxcm-mrw6-c446)
Insecurely deleted files In vodozemac
0.5
Low
Ecosystem: Cargo
Component: vodozemac
FLAT-8BXOVÂ (GHSA-7p9w-p5qm-5gc5)
Improper resource allocation In actix-http
4.6
Medium
Ecosystem: Cargo
Component: actix-http
FLAT-R73ZXÂ (CVE-2026-115701)
Improper resource allocation In cowboy
4.6
Medium
Ecosystem: Hex
Component: cowboy
FLAT-T84S4Â (CVE-2026-113431)
Improper resource allocation In cowlib
6.6
Medium
Ecosystem: Hex
Component: cowlib
FLAT-WTAB9Â (CVE-2026-66294)
XML injection (XXE) In saxy
0.5
Low
Ecosystem: Hex
Component: saxy
FLAT-IATZUÂ (CVE-2026-66295)
XPath injection In saxy
0.5
Low
Ecosystem: Hex
Component: saxy
FLAT-3FPKWÂ (CVE-2026-66293)
XML injection (XXE) In saxy
0.5
Low
Ecosystem: Hex
Component: saxy
FLAT-VC7PZÂ (MAL-2026-18719)
Use of software with malware In @kora20030101/test-pkg-delete-me
5.2
Medium
Ecosystem: Npm
Component: @kora20030101/test-pkg-delete-me
FLAT-YQ4SXÂ (MAL-2026-18718)
Use of software with malware In @exclipz/bails
5.2
Medium
Ecosystem: Npm
Component: @exclipz/bails
FLAT-NO7XUÂ (MAL-2026-18717)
Use of software with malware In @exclipz/baileys
5.2
Medium
Ecosystem: Npm
Component: @exclipz/baileys
FLAT-SJ09KÂ (GO-2026-6905)
Out-of-bounds read In github.com/blakesmith/ar
6.8
Medium
Ecosystem: Go
Component: github.com/blakesmith/ar
FLAT-NRVLGÂ (GO-2026-6911)
Server-side request forgery (SSRF) In github.com/mark3labs/mcp-go
8.3
High
Ecosystem: Go
Component: github.com/mark3labs/mcp-go
FLAT-DBR1PÂ (GO-2026-6893)
Spoofing In github.com/google/go-eventlog
0.6
Low
Ecosystem: Go
Component: github.com/google/go-eventlog
FLAT-Z7JRIÂ (CVE-2026-111497)
Out-of-bounds read In github.com/andybalholm/brotli
6.1
Medium
Ecosystem: Go
Component: github.com/andybalholm/brotli
FLAT-S9042Â (GO-2026-6909)
Lack of data validation In github.com/crewjam/saml
2.3
Low
Ecosystem: Go
Component: github.com/crewjam/saml
FLAT-MXC6CÂ (CVE-2026-13322)
Improper resource allocation In kubevirt.io/kubevirt
3.3
Low
Ecosystem: Go
Component: kubevirt.io/kubevirt
FLAT-W3UP8Â (GHSA-hff9-5pqw-6w9f)
Out-of-bounds read In github.com/imgproxy/imgproxy/v4
8.1
High
Ecosystem: Go
Component: github.com/imgproxy/imgproxy/v4
FLAT-Z5FANÂ (GHSA-494m-4556-wf5p)
Out-of-bounds read In github.com/imgproxy/imgproxy
6.6
Medium
Ecosystem: Go
Component: github.com/imgproxy/imgproxy
FLAT-DU244Â (GHSA-mmq5-xm89-9pfg)
Improper resource allocation In github.com/imgproxy/imgproxy/v4
6.6
Medium
Ecosystem: Go
Component: github.com/imgproxy/imgproxy/v4
FLAT-SWR1YÂ (CVE-2026-116591)
Out-of-bounds read In github.com/klauspost/compress
6.6
Medium
Ecosystem: Go
Component: github.com/klauspost/compress
FLAT-GLQW9Â (CVE-2026-85747)
Supply Chain Attack - Lock Files In github.com/distribution/distribution
6.3
Medium
Ecosystem: Go
Component: github.com/distribution/distribution
FLAT-9DP9FÂ (CVE-2026-107223)
Lack of data validation In github.com/360entsecgroup-skylar/excelize/v2
4.9
Medium
Ecosystem: Go
Component: github.com/360entsecgroup-skylar/excelize/v2
FLAT-BIEHIÂ (CVE-2026-107224)
Out-of-bounds read In github.com/360entsecgroup-skylar/excelize/v2
6.6
Medium
Ecosystem: Go
Component: github.com/360entsecgroup-skylar/excelize/v2
FLAT-TO85CÂ (CVE-2026-107219)
Asymmetric denial of service - ReDoS In github.com/360entsecgroup-skylar/excelize/v2
6.6
Medium
Ecosystem: Go
Component: github.com/360entsecgroup-skylar/excelize/v2
FLAT-G88TKÂ (MAL-2026-18715)
Use of software with malware In talk-lang
5.2
Medium
Ecosystem: Npm
Component: talk-lang
FLAT-S1R7KÂ (MAL-2026-18714)
Use of software with malware In plain-lang
5.2
Medium
Ecosystem: Npm
Component: plain-lang
FLAT-8B7H0Â (MAL-2026-18709)
Use of software with malware In test1817
5.2
Medium
Ecosystem: Npm
Component: test1817
FLAT-EVMISÂ (MAL-2026-18708)
Use of software with malware In @gemshell/win32-x64
5.2
Medium
Ecosystem: Npm
Component: @gemshell/win32-x64
FLAT-3EA3BÂ (CVE-2026-119434)
Excessive privileges In ezstd
4.6
Medium
Ecosystem: Hex
Component: ezstd
FLAT-0DV8LÂ (CVE-2026-62300)
Improper resource allocation In filecoin-pin
2.3
Low
Ecosystem: Npm
Component: filecoin-pin
FLAT-D6S1PÂ (CVE-2026-61536)
Remote command execution In banks
5.2
Medium
Ecosystem: PyPI
Component: banks
FLAT-7EB2EÂ (CVE-2026-105769)
Weak credential policy In github.com/chainguard-dev/kaniko
8.1
High
Ecosystem: Go
Component: github.com/chainguard-dev/kaniko
FLAT-7JB58Â (CVE-2026-12411)
Improper authorization control for web services In github.com/canonical/lxd
5.6
Medium
Ecosystem: Go
Component: github.com/canonical/lxd
FLAT-9QASRÂ (MAL-2026-18707)
Use of software with malware In dsh-purge
5.2
Medium
Ecosystem: Npm
Component: dsh-purge
FLAT-69N90Â (MAL-2026-18716)
Use of software with malware In @nuri.yavuz.tr.2/my-unique-pinger
5.2
Medium
Ecosystem: Npm
Component: @nuri.yavuz.tr.2/my-unique-pinger
FLAT-L53RTÂ (MAL-2026-18706)
Use of software with malware In mcp-teamviewer
5.2
Medium
Ecosystem: PyPI
Component: mcp-teamviewer
FLAT-9RWV2Â (RUSTSEC-2026-0449)
Non-upgradable dependencies In ocipkg
1.3
Low
Ecosystem: Cargo
Component: ocipkg
FLAT-3031CÂ (MAL-2026-18705)
Use of software with malware In teamviewer-mcp-server
5.2
Medium
Ecosystem: PyPI
Component: teamviewer-mcp-server
FLAT-AGDU6Â (MAL-2026-18704)
Use of software with malware In dbt-adapter
5.2
Medium
Ecosystem: PyPI
Component: dbt-adapter
FLAT-XZ1DEÂ (MAL-2026-18703)
Use of software with malware In synapse-hub
5.2
Medium
Ecosystem: Npm
Component: synapse-hub
FLAT-G43MYÂ (MAL-2026-18658)
Use of software with malware In rcp-ndcg
5.2
Medium
Ecosystem: PyPI
Component: rcp-ndcg
FLAT-KRGFHÂ (MAL-2026-18657)
Use of software with malware In strands-aidr
5.2
Medium
Ecosystem: PyPI
Component: strands-aidr
FLAT-9OER4Â (MAL-2026-18713)
Use of software with malware In rafael-bails
5.2
Medium
Ecosystem: Npm
Component: rafael-bails
FLAT-6FHCLÂ (MAL-2026-18712)
Use of software with malware In oktz-baileys
5.2
Medium
Ecosystem: Npm
Component: oktz-baileys
FLAT-61ZYLÂ (MAL-2026-18711)
Use of software with malware In nishiki-bail
5.2
Medium
Ecosystem: Npm
Component: nishiki-bail
FLAT-3A1VLÂ (MAL-2026-18710)
Use of software with malware In kurobails
5.2
Medium
Ecosystem: Npm
Component: kurobails
FLAT-IEETVÂ (MAL-2026-18668)
Use of software with malware In wet_rat_replicate_automation
5.2
Medium
Ecosystem: Npm
Component: wet_rat_replicate_automation
FLAT-RSZPAÂ (MAL-2026-18667)
Use of software with malware In unemployed_xerinae-toolteadev
5.2
Medium
Ecosystem: Npm
Component: unemployed_xerinae-toolteadev
FLAT-HA6G4Â (MAL-2026-18666)
Use of software with malware In related_blackbird-toolteadev
5.2
Medium
Ecosystem: Npm
Component: related_blackbird-toolteadev
FLAT-063IHÂ (MAL-2026-18665)
Use of software with malware In quiche-tea-curut
5.2
Medium
Ecosystem: Npm
Component: quiche-tea-curut
FLAT-C32ZPÂ (MAL-2026-18664)
Use of software with malware In peas-tea-curut
5.2
Medium
Ecosystem: Npm
Component: peas-tea-curut
FLAT-KDIUZÂ (MAL-2026-18663)
Use of software with malware In pearx93qja-notthedevs
5.2
Medium
Ecosystem: Npm
Component: pearx93qja-notthedevs
FLAT-3S53ZÂ (MAL-2026-18662)
Use of software with malware In maila-talijah-alpha-128
5.2
Medium
Ecosystem: Npm
Component: maila-talijah-alpha-128
FLAT-BHA5QÂ (MAL-2026-18661)
Use of software with malware In low_hummingbird_replicate_automation
5.2
Medium
Ecosystem: Npm
Component: low_hummingbird_replicate_automation
FLAT-QSBTZÂ (MAL-2026-18660)
Use of software with malware In dian-peyek23-miaww
5.2
Medium
Ecosystem: Npm
Component: dian-peyek23-miaww
FLAT-K6C5UÂ (MAL-2026-18659)
Use of software with malware In dependent-final
5.2
Medium
Ecosystem: Npm
Component: dependent-final
FLAT-20G8HÂ (CVE-2026-122299)
Lack of data validation In dulwich
4.9
Medium
Ecosystem: Debian
Component: dulwich
FLAT-SJ1GBÂ (MAL-2026-18651)
Use of software with malware In @secauditb20y/sec-test-b1
5.2
Medium
Ecosystem: Npm
Component: @secauditb20y/sec-test-b1
FLAT-G5RCWÂ (MAL-2026-18650)
Use of software with malware In @secaudita10x/sec-test-a1
5.2
Medium
Ecosystem: Npm
Component: @secaudita10x/sec-test-a1
FLAT-93837Â (MAL-2026-18653)
Use of software with malware In dogmans-afterglow
5.2
Medium
Ecosystem: Npm
Component: dogmans-afterglow
FLAT-KRJ0GÂ (MAL-2026-18656)
Use of software with malware In thththtbhthhth
5.2
Medium
Ecosystem: Npm
Component: thththtbhthhth
FLAT-XHOMPÂ (MAL-2026-18652)
Use of software with malware In doghack-afterglow
5.2
Medium
Ecosystem: Npm
Component: doghack-afterglow
FLAT-O404CÂ (MAL-2026-18655)
Use of software with malware In nannnnnnnnn
5.2
Medium
Ecosystem: Npm
Component: nannnnnnnnn
FLAT-H8QUXÂ (MAL-2026-18654)
Use of software with malware In heheheshsds
5.2
Medium
Ecosystem: Npm
Component: heheheshsds
FLAT-SCWW0Â (MAL-2026-18649)
Use of software with malware In @saidddddddddd/ggsgg
5.2
Medium
Ecosystem: Npm
Component: @saidddddddddd/ggsgg