Search: github.com/advisories | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

NPM debug and chalk packages compromised

9 months ago

1372 points

2.

Show HN: Pulsar, a browser-only GitHub PR monitor for engineering manager

pulsar.arkham-advisory.com

3 months ago

2 points

3.

Embedded malware in RC (NPM package)

github.com/advisories

5 years ago

140 points

4.

Pre-auth Remote Code Execution Vulnerability in Metasploit

github.com/justinsteven

10 years ago

140 points

5.

Embedded Malicious Code in node-ipc

github.com/advisories

4 years ago

139 points

6.

Embedded Malware in Coa

github.com/advisories

5 years ago

137 points

7.

GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink

github.com/justinsteven

5 years ago

129 points

8.

Buffer Overflows in Notepad++

securitylab.github.com

3 years ago

68 points

9.

Claude Code CVE-2026-39861:sandbox escape via symlink

github.com/advisories

a month ago

51 points

10.

Authorization Bypass in Next.js Middleware

github.com/advisories

a year ago

25 points

11.

Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution

securitylab.github.com

3 years ago

18 points

12.

Malware in fsevents

github.com/advisories

3 years ago

16 points

13.

Okta Auth0 JWT vulnerability CVE-2022-23529

github.com/advisories

3 years ago

7 points

14.

Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass

github.com/justinsteven

6 years ago

6 points

15.

Cloudflare/workers-OAuth-provider missing validation of redirect_URI

github.com/advisories

a year ago

5 points

16.

GHSL-2021-1012: Poor random number generation in keypair – CVE-2021-41117

securitylab.github.com

5 years ago

5 points

17.

Buffer Overflows in Notepad++

securitylab.github.com

3 years ago

4 points

18.

Path traversal in YouTube-dl leading to RCE – CVE-2024-38519

securitylab.github.com

2 years ago

4 points

19.

Axios request smuggling via prototype pollution – Critical (CVSS 9.9)

github.com/advisories

2 months ago

3 points

20.

Malware in Ngx-Bootstrap

github.com/advisories

9 months ago

3 points

21.

Malware in Debug (npm)

github.com/advisories

9 months ago

3 points

22.

browserify/pbkdf2 returns predictable uninitialized/zero-filled memory

github.com/advisories

a year ago

3 points

23.

Embedded malware in ua-parser-JS (NPM package)

github.com/advisories

5 years ago

3 points

24.

Embedded crypto miner in ua-parser-JS

github.com/advisories

5 years ago

3 points

25.

Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass

github.com/justinsteven

6 years ago

3 points

26.

CVE-2021-41117: Poor random number generation in keypair

securitylab.github.com

5 years ago

3 points

27.

Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass

github.com/justinsteven

6 years ago

3 points

28.

Distributed locking using PostgreSQL advisory locks

github.com/blockai

10 years ago

3 points

29.

Malware in Stylus

github.com/advisories

a year ago

2 points

30.

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

github.com/advisories

2 months ago

2 points