FLAT-WQTEH (CVE-2026-71870)
Improper resource allocation In pypdf
1.1
Low
Ecosystem: PyPI
Component: pypdf
FLAT-YWWUE (CVE-2026-71852)
Symmetric denial of service In pypdf
1.1
Low
Ecosystem: PyPI
Component: pypdf
FLAT-E6B9A (CVE-2026-71851)
Insecure generation of random numbers In crypto-js
8.1
High
Ecosystem: Npm
Component: crypto-js
FLAT-J6VAJ (CVE-2026-71850)
Insecure session management In hono
4.6
Medium
Ecosystem: Npm
Component: hono
FLAT-UIF4E (CVE-2026-71849)
Sensitive information sent insecurely In hono
1.7
Low
Ecosystem: Npm
Component: hono
FLAT-KK4A9 (CVE-2026-71848)
Improper resource allocation In hono
4.6
Medium
Ecosystem: Npm
Component: hono
FLAT-UCPT7 (CVE-2026-71847)
Improper resource allocation In json
4.6
Medium
Ecosystem: RubyGems
Component: json
FLAT-F10BS (CVE-2026-67422)
Asymmetric denial of service - ReDoS In pymdown-extensions
6.6
Medium
Ecosystem: PyPI
Component: pymdown-extensions
FLAT-2XS3D (CVE-2026-63223)
Insecure file upload In codeigniter4/framework
5.2
Medium
Ecosystem: Packagist
Component: codeigniter4/framework
FLAT-MCCXS (CVE-2026-63222)
Lack of data validation - Path Traversal In codeigniter4/framework
6.9
Medium
Ecosystem: Packagist
Component: codeigniter4/framework
FLAT-YNQSZ (CVE-2026-63221)
SQL injection In codeigniter4/framework
2.4
Low
Ecosystem: Packagist
Component: codeigniter4/framework
FLAT-U9NOR (CVE-2026-63220)
Improper resource allocation - Buffer overflow In codeigniter4/framework
1.7
Low
Ecosystem: Packagist
Component: codeigniter4/framework
FLAT-KTC7E (MAL-2026-13628)
Use of software with malware In streak-map-kit
5.2
Medium
Ecosystem: Npm
Component: streak-map-kit
FLAT-0MQOO (CVE-2026-15895)
OS Command Injection In jsii-diff
5.7
Medium
Ecosystem: Npm
Component: jsii-diff
FLAT-NFC1J (MAL-2026-13627)
Use of software with malware In @nestjs-passport/jwt
5.2
Medium
Ecosystem: Npm
Component: @nestjs-passport/jwt
FLAT-5S4YF (MAL-2026-13626)
Use of software with malware In @mrbenty8jf1p9y5/oidc-bind-canary
5.2
Medium
Ecosystem: Npm
Component: @mrbenty8jf1p9y5/oidc-bind-canary
FLAT-RCSOI (MAL-2026-13624)
Use of software with malware In @depup/memfs
5.2
Medium
Ecosystem: Npm
Component: @depup/memfs
FLAT-K0L1L (MAL-2026-13625)
Use of software with malware In @depup/nuxt
5.2
Medium
Ecosystem: Npm
Component: @depup/nuxt
FLAT-S9BM0 (MAL-2026-13622)
Use of software with malware In @depup/astro
5.2
Medium
Ecosystem: Npm
Component: @depup/astro
FLAT-8DIJW (MAL-2026-13623)
Use of software with malware In @depup/aws-sdk__credential-provider-process
5.2
Medium
Ecosystem: Npm
Component: @depup/aws-sdk__credential-provider-process
FLAT-BXOIL (MAL-2026-13621)
Use of software with malware In @decido/backend-core
5.2
Medium
Ecosystem: Npm
Component: @decido/backend-core
FLAT-7QGJF (CVE-2026-56818)
Improper resource allocation In io.netty:netty-codec-redis
4.8
Medium
Ecosystem: Maven
Component: io.netty:netty-codec-redis
FLAT-0MOM9 (MAL-2026-13620)
Use of software with malware In @catamania/front-components
5.2
Medium
Ecosystem: Npm
Component: @catamania/front-components
FLAT-LZ43W (CVE-2026-54164)
Lack of data validation - Type confusion In api-platform/core
4.9
Medium
Ecosystem: Packagist
Component: api-platform/core
FLAT-MOBJZ (CVE-2026-66062)
Asymmetric denial of service - ReDoS In @sveltejs/kit
4.6
Medium
Ecosystem: Npm
Component: @sveltejs/kit
FLAT-SGGEZ (GHSA-7c4v-fwgw-9rf7)
Enabled default configuration In nuxt
1.3
Low
Ecosystem: Npm
Component: nuxt
FLAT-2OYUA (CVE-2026-67585)
Asymmetric denial of service In absinthe_federation
6.6
Medium
Ecosystem: Hex
Component: absinthe_federation
FLAT-Q3AZ4 (CVE-2026-71557)
Lack of data validation - Path Traversal In github.com/go-git/go-git/v6
4.8
Medium
Ecosystem: Go
Component: github.com/go-git/go-git/v6
FLAT-939C7 (CVE-2026-71556)
Lack of data validation - Path Traversal In github.com/go-git/go-git/v5
1.9
Low
Ecosystem: Go
Component: github.com/go-git/go-git/v5
FLAT-JKBHH (MAL-2026-13614)
Use of software with malware In aclade-agent
5.2
Medium
Ecosystem: Npm
Component: aclade-agent
FLAT-I94AV (MAL-2026-13618)
Use of software with malware In w-screenctl
5.2
Medium
Ecosystem: Npm
Component: w-screenctl
FLAT-TF35O (MAL-2026-13615)
Use of software with malware In agenthub-ai
5.2
Medium
Ecosystem: Npm
Component: agenthub-ai
FLAT-0GYN3 (MAL-2026-13617)
Use of software with malware In ts-utility-plus
5.2
Medium
Ecosystem: Npm
Component: ts-utility-plus
FLAT-32O2X (MAL-2026-13616)
Use of software with malware In hardhat-cap
5.2
Medium
Ecosystem: Npm
Component: hardhat-cap
FLAT-8Q2J3 (MAL-2026-13619)
Use of software with malware In atlas-internal
5.2
Medium
Ecosystem: PyPI
Component: atlas-internal
FLAT-FUJ34 (GHSA-wvpp-8hx9-p66j)
Insecure functionality In gitpython
7.2
High
Ecosystem: PyPI
Component: gitpython
FLAT-VIR3Z (GHSA-jm78-9fvv-mhgr)
Remote command execution In gitpython
5.2
Medium
Ecosystem: PyPI
Component: gitpython
FLAT-GWXOJ (GHSA-hmq2-w58f-27jc)
Lack of data validation - Path Traversal In gitpython
6.5
Medium
Ecosystem: PyPI
Component: gitpython
FLAT-3CAEM (GHSA-hh9p-6wh2-4mfc)
Lack of data validation - Path Traversal In gitpython
1.9
Low
Ecosystem: PyPI
Component: gitpython
FLAT-A7VF1 (GHSA-9rj7-rf2p-w77r)
Server side template injection In gitpython
4.4
Medium
Ecosystem: PyPI
Component: gitpython
FLAT-JRM73 (GHSA-4gmw-gg2m-w46p)
Insecure functionality In gitpython
2.0
Low
Ecosystem: PyPI
Component: gitpython
FLAT-0U3J1 (GHSA-55q2-fjhq-7xh7)
Reflected cross-site scripting (XSS) In dompurify
1.2
Low
Ecosystem: Npm
Component: dompurify
FLAT-LPUU1 (CVE-2026-62996)
Lack of data validation - Path Traversal In smarty/smarty
4.6
Medium
Ecosystem: Packagist
Component: smarty/smarty
FLAT-RBH4O (CVE-2026-62992)
Lack of data validation - Path Traversal In smarty/smarty
4.6
Medium
Ecosystem: Packagist
Component: smarty/smarty
FLAT-00DNH (GHSA-wg23-69c2-gjc8)
Security controls bypass or absence In craftcms/cms
6.9
Medium
Ecosystem: Packagist
Component: craftcms/cms
FLAT-G209L (MAL-2026-13613)
Use of software with malware In big-tss
5.2
Medium
Ecosystem: Npm
Component: big-tss
FLAT-C9EN3 (MAL-2026-13611)
Use of software with malware In mangomind-agent
5.2
Medium
Ecosystem: Npm
Component: mangomind-agent
FLAT-FCPZJ (MAL-2026-13612)
Use of software with malware In transform-es2015-unicode-regex
5.2
Medium
Ecosystem: Npm
Component: transform-es2015-unicode-regex
FLAT-KYFQP (MAL-2026-13610)
Use of software with malware In f-termx
5.2
Medium
Ecosystem: Npm
Component: f-termx
FLAT-AHBM9 (MAL-2026-13609)
Use of software with malware In hardhat-set
5.2
Medium
Ecosystem: Npm
Component: hardhat-set
FLAT-866JF (MAL-2026-13608)
Use of software with malware In @vertexa/prisma-fetch-engine
5.2
Medium
Ecosystem: Npm
Component: @vertexa/prisma-fetch-engine
FLAT-HPRXL (MAL-2026-13605)
Use of software with malware In yakuza0
5.2
Medium
Ecosystem: Npm
Component: yakuza0
FLAT-K06ZS (MAL-2026-13520)
Use of software with malware In @aster110/cc2wechat
5.2
Medium
Ecosystem: Npm
Component: @aster110/cc2wechat
FLAT-PA108 (MAL-2026-13549)
Use of software with malware In dojo-rn-interview
5.2
Medium
Ecosystem: Npm
Component: dojo-rn-interview
FLAT-5RIZ0 (MAL-2026-13606)
Use of software with malware In cdktn-provider-azurerm
5.2
Medium
Ecosystem: PyPI
Component: cdktn-provider-azurerm
FLAT-6VUJZ (MAL-2026-13522)
Use of software with malware In base-ui-cli
5.2
Medium
Ecosystem: Npm
Component: base-ui-cli
FLAT-DSM6T (MAL-2026-13539)
Use of software with malware In delivery-ci-codeceptjs
5.2
Medium
Ecosystem: Npm
Component: delivery-ci-codeceptjs
FLAT-LCWOM (MAL-2026-13574)
Use of software with malware In dolyame-ui-inputautocomplete
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputautocomplete
FLAT-0X8OF (MAL-2026-13547)
Use of software with malware In devplatform-spa-plugin-remote-module
5.2
Medium
Ecosystem: Npm
Component: devplatform-spa-plugin-remote-module
FLAT-XBUIO (MAL-2026-13557)
Use of software with malware In dolyame-ui-checkablegroup
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-checkablegroup
FLAT-NXBD0 (MAL-2026-13577)
Use of software with malware In dolyame-ui-inputdate
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputdate
FLAT-AE1HO (MAL-2026-13542)
Use of software with malware In delivery-ci-jira
5.2
Medium
Ecosystem: Npm
Component: delivery-ci-jira
FLAT-VS2GX (MAL-2026-13552)
Use of software with malware In dolyame-boxy-independent-bnpl-main-title
5.2
Medium
Ecosystem: Npm
Component: dolyame-boxy-independent-bnpl-main-title
FLAT-8LXI0 (MAL-2026-13596)
Use of software with malware In dolyame-ui-progressline
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-progressline
FLAT-RU7Y5 (MAL-2026-13583)
Use of software with malware In dolyame-ui-inputsearchtagged
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputsearchtagged
FLAT-H6EBS (MAL-2026-13566)
Use of software with malware In dolyame-ui-deprecatepropshoc
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-deprecatepropshoc
FLAT-8X6I3 (MAL-2026-13576)
Use of software with malware In dolyame-ui-inputcount
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputcount
FLAT-0CR02 (MAL-2026-13565)
Use of software with malware In dolyame-ui-datatable
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-datatable
FLAT-X3D0S (MAL-2026-13526)
Use of software with malware In bigops-shared-product-design
5.2
Medium
Ecosystem: Npm
Component: bigops-shared-product-design
FLAT-ECTX7 (MAL-2026-13585)
Use of software with malware In dolyame-ui-inputtag
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputtag
FLAT-MTRRX (MAL-2026-13601)
Use of software with malware In dolyame-ui-tablemobile
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-tablemobile
FLAT-ND1R8 (MAL-2026-13559)
Use of software with malware In dolyame-ui-collapseblock
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-collapseblock
FLAT-DTMSB (MAL-2026-13562)
Use of software with malware In dolyame-ui-contextmenusearchable
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-contextmenusearchable
FLAT-OVFNV (MAL-2026-13582)
Use of software with malware In dolyame-ui-inputsearch
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputsearch
FLAT-K2BBB (MAL-2026-13548)
Use of software with malware In devplatform-stylelint-config
5.2
Medium
Ecosystem: Npm
Component: devplatform-stylelint-config
FLAT-3LBGC (MAL-2026-13595)
Use of software with malware In dolyame-ui-postcsscustomproperties
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-postcsscustomproperties
FLAT-FZAIX (MAL-2026-13584)
Use of software with malware In dolyame-ui-inputsecure
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputsecure
FLAT-ZWD2C (MAL-2026-13540)
Use of software with malware In delivery-ci-core
5.2
Medium
Ecosystem: Npm
Component: delivery-ci-core
FLAT-47OKG (MAL-2026-13597)
Use of software with malware In dolyame-ui-scrollblock
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-scrollblock
FLAT-9UJQ3 (MAL-2026-13528)
Use of software with malware In bnpl-blocks-atom-bnpl-faq-item
5.2
Medium
Ecosystem: Npm
Component: bnpl-blocks-atom-bnpl-faq-item
FLAT-NJHKR (MAL-2026-13532)
Use of software with malware In ded-pwa-bnpl-forms-test-demo
5.2
Medium
Ecosystem: Npm
Component: ded-pwa-bnpl-forms-test-demo
FLAT-V2E1W (MAL-2026-13535)
Use of software with malware In ded-pwa-c-mapping
5.2
Medium
Ecosystem: Npm
Component: ded-pwa-c-mapping
FLAT-59QSX (MAL-2026-13578)
Use of software with malware In dolyame-ui-inputfio
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputfio
FLAT-FM5II (MAL-2026-13534)
Use of software with malware In ded-pwa-c-boxy-di
5.2
Medium
Ecosystem: Npm
Component: ded-pwa-c-boxy-di
FLAT-GEZ38 (MAL-2026-13563)
Use of software with malware In dolyame-ui-controlgroup
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-controlgroup
FLAT-LH9CG (MAL-2026-13580)
Use of software with malware In dolyame-ui-inputphone
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-inputphone
FLAT-NGPCF (MAL-2026-13523)
Use of software with malware In beaver-ui-popover-marker
5.2
Medium
Ecosystem: Npm
Component: beaver-ui-popover-marker
FLAT-N08IT (MAL-2026-13555)
Use of software with malware In dolyame-ui-cardlogo
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-cardlogo
FLAT-DYCYL (MAL-2026-13603)
Use of software with malware In platform-ui-colors
5.2
Medium
Ecosystem: Npm
Component: platform-ui-colors
FLAT-YKPKU (MAL-2026-13599)
Use of software with malware In dolyame-ui-sortablelist
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-sortablelist
FLAT-V240B (MAL-2026-13561)
Use of software with malware In dolyame-ui-contextmenu
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-contextmenu
FLAT-M6PDH (MAL-2026-13570)
Use of software with malware In dolyame-ui-focusstatehoc
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-focusstatehoc
FLAT-8FRAG (MAL-2026-13556)
Use of software with malware In dolyame-ui-carouselline
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-carouselline
FLAT-GTJYT (MAL-2026-13533)
Use of software with malware In ded-pwa-c-boxy
5.2
Medium
Ecosystem: Npm
Component: ded-pwa-c-boxy
FLAT-JH0MR (MAL-2026-13572)
Use of software with malware In dolyame-ui-iconspack
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-iconspack
FLAT-1F1WU (MAL-2026-13594)
Use of software with malware In dolyame-ui-postcssconfig
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-postcssconfig
FLAT-15V3G (MAL-2026-13604)
Use of software with malware In tailwindcss-motion-advanced
5.2
Medium
Ecosystem: Npm
Component: tailwindcss-motion-advanced
FLAT-ZE8R6 (MAL-2026-13569)
Use of software with malware In dolyame-ui-flatcorners
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-flatcorners
FLAT-TPQAL (MAL-2026-13592)
Use of software with malware In dolyame-ui-pageheader
5.2
Medium
Ecosystem: Npm
Component: dolyame-ui-pageheader
FLAT-P8TDQ (MAL-2026-13553)
Use of software with malware In dolyame-boxy-independent-bnpl-product-grid
5.2
Medium
Ecosystem: Npm
Component: dolyame-boxy-independent-bnpl-product-grid