Search: github.com/advisories | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

NPM debug and chalk packages compromised (aikido.dev)

1372 points

9 months ago

2.

Show HN: Pulsar, a browser-only GitHub PR monitor for engineering manager (pulsar.arkham-advisory.com)

2 points

3 months ago

3.

Embedded malware in RC (NPM package) (github.com/advisories)

140 points

5 years ago

4.

Pre-auth Remote Code Execution Vulnerability in Metasploit (github.com/justinsteven)

140 points

10 years ago

5.

Embedded Malicious Code in node-ipc (github.com/advisories)

139 points

4 years ago

6.

Embedded Malware in Coa (github.com/advisories)

137 points

5 years ago

7.

GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink (github.com/justinsteven)

129 points

5 years ago

8.

Buffer Overflows in Notepad++ (securitylab.github.com)

68 points

3 years ago

9.

Claude Code CVE-2026-39861:sandbox escape via symlink (github.com/advisories)

51 points

a month ago

10.

Authorization Bypass in Next.js Middleware (github.com/advisories)

25 points

a year ago

11.

Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution (securitylab.github.com)

18 points

3 years ago

12.

Malware in fsevents (github.com/advisories)

16 points

3 years ago

13.

Okta Auth0 JWT vulnerability CVE-2022-23529 (github.com/advisories)

7 points

3 years ago

14.

Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass (github.com/justinsteven)

6 points

6 years ago

15.

Cloudflare/workers-OAuth-provider missing validation of redirect_URI (github.com/advisories)

5 points

a year ago

16.

GHSL-2021-1012: Poor random number generation in keypair – CVE-2021-41117 (securitylab.github.com)

5 points

5 years ago

17.

Buffer Overflows in Notepad++ (securitylab.github.com)

4 points

3 years ago

18.

Path traversal in YouTube-dl leading to RCE – CVE-2024-38519 (securitylab.github.com)

4 points

2 years ago

19.

Axios request smuggling via prototype pollution – Critical (CVSS 9.9) (github.com/advisories)

3 points

2 months ago

20.

Malware in Ngx-Bootstrap (github.com/advisories)

3 points

9 months ago

21.

Malware in Debug (npm) (github.com/advisories)

3 points

9 months ago

22.

browserify/pbkdf2 returns predictable uninitialized/zero-filled memory (github.com/advisories)

3 points

a year ago

23.

Embedded malware in ua-parser-JS (NPM package) (github.com/advisories)

3 points

5 years ago

24.

Embedded crypto miner in ua-parser-JS (github.com/advisories)

3 points

5 years ago

25.

Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass (github.com/justinsteven)

3 points

6 years ago

26.

CVE-2021-41117: Poor random number generation in keypair (securitylab.github.com)

3 points

5 years ago

27.

Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass (github.com/justinsteven)

3 points

6 years ago

28.

Distributed locking using PostgreSQL advisory locks (github.com/blockai)

3 points

10 years ago

29.

Malware in Stylus (github.com/advisories)

2 points

10 months ago

30.

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket (github.com/advisories)

2 points

2 months ago