VDB

GCVE-110-OSM-2026-13862

GCVE-110-OSM-2026-13862
Advisory PublishedCVSS 5.4/10
Vulnetix · Advisory published October 16, 2026
This package is a staged placeholder with version 0.0.0-stage, a description explicitly stating it is a temporary placeholder for staged publishing, and no functional code. The only finding is the absence of a source repository, which is expected for a placeholder package. There are no IOCs, no obfuscation, no exfil paths, no entrypoint, and no code-level findings of any kind. ADDITIONAL FINDINGS - Brand New Package - Rapid Version Publishing

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
unknownparxleysall (affected)—

References

advisory
vendor

Browse GCVE Records

3,340 records in the GCVE database · Updated October 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›