VDB

GCVE-VVD-OSM-2026-244

GCVE-VVD-OSM-2026-244
Advisory PublishedCVSS 9.6/10
Vulnetix · Advisory published March 6, 2026
Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration. Payload: setup.py Key findings: - OAST/Interactsh Exfiltration in setup.py: "webhook.site" - Python File Upload to Remote in setup.py: "urllib.request.Request( BEACON_URL, data=" - setup.py Code Execution in setup.py: "cmdclass={'install'" - Setup.py Command Override in setup.py: "cmdclass={'install'" IOCs: - urls: https://webhook.site/75e40e35-79ef-4cf4-b778-1b2e05346a3d - webhookServices: https://webhook.site/75e40e35-79ef-4cf4-b778-1b2e05346a3d - payloadFileHash: d6c1de2978c334e7f64b7cb47fea0211d50ea17faf4bd3920e03e1a3cedeea1e
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownStl.RestEase.Netall (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—
unknownStl.Fusion.Ext.Services.Netall (affected)—
unknownStl.Fusion.Ext.Contracts.Netall (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—
unknownhostlists-plugins-defaultall (affected)—

Aliases

MAL-2026-1275

Transitive aliases

MAL-2026-2073VVD-OSM-2026-76VVD-OSM-2026-591VVD-OSM-2026-38VVD-OSM-2026-576MAL-2026-1562VVD-OSM-2026-228MAL-2026-1433VVD-OSM-2026-604VVD-OSM-2026-693MAL-2026-2136VVD-OSM-2026-133MAL-2026-1261MAL-2026-1560VVD-OSM-2026-102MAL-2026-2184GHSA-86xp-4fvm-qm2pVVD-OSM-2026-547VVD-OSM-2026-713VVD-OSM-2026-586VVD-OSM-2026-673MAL-2026-1583VVD-OSM-2026-593MAL-2026-1085GHSA-9m98-jvf5-jxx5MAL-2026-1325VVD-OSM-2026-601VVD-OSM-2026-259GHSA-4gc2-gg24-6qf6VVD-OSM-2026-43GHSA-2prc-m9c3-jgwpMAL-2026-2093VVD-OSM-2026-232VVD-OSM-2026-638MAL-2026-1290MAL-2026-1140VVD-OSM-2026-619GHSA-95h8-q9jh-jjwfVVD-OSM-2026-572MAL-2026-2167GHSA-fm43-2f72-p329VVD-OSM-2026-140VVD-OSM-2026-573MAL-2026-1411MAL-2026-1263VVD-OSM-2026-174VVD-OSM-2026-149MAL-2026-1940VVD-OSM-2026-654MAL-2026-2189VVD-OSM-2026-155VVD-OSM-2026-238VVD-OSM-2026-716VVD-OSM-2026-721VVD-OSM-2026-104MAL-2026-2200GHSA-2rjv-fxjc-xwmvMAL-2026-1496VVD-OSM-2026-157VVD-OSM-2026-2VVD-OSM-2026-227VVD-OSM-2026-168VVD-OSM-2026-567MAL-2026-1961GHSA-hfhc-gmgj-9v7vMAL-2026-1029VVD-OSM-2026-161VVD-OSM-2026-156MAL-2026-1143MAL-2026-2132GHSA-p427-hrfp-pc52VVD-OSM-2026-96GHSA-f582-qpjg-gx9hVVD-OSM-2026-668MAL-2026-1018VVD-OSM-2026-163MAL-2026-2094GHSA-r934-qgg3-v7fgGHSA-6w26-75vp-gf97VVD-OSM-2026-628VVD-OSM-2026-223VVD-OSM-2026-714MAL-2026-1136VVD-OSM-2026-31MAL-2026-1977VVD-OSM-2026-191GHSA-xpmv-42gw-w7wcGHSA-7g9x-834j-4788MAL-2026-1371VVD-OSM-2026-577MAL-2026-1412MAL-2026-2166VVD-OSM-2026-39VVD-OSM-2026-124VVD-OSM-2026-36GHSA-6vcv-6xjg-jm7wGHSA-rm67-f2rf-9fwfMAL-2026-2233GHSA-f8cx-966c-8x2hVVD-OSM-2026-678VVD-OSM-2026-212MAL-2026-1222GHSA-cqxq-2582-f357VVD-OSM-2026-549VVD-OSM-2026-563MAL-2026-1983MAL-2026-2176MAL-2026-2222MAL-2026-1935VVD-OSM-2026-686VVD-OSM-2026-571GHSA-h2h6-q29m-3mm3MAL-2026-1286MAL-2026-2006MAL-2026-1953GHSA-r54j-4cj8-jf2vVVD-OSM-2026-539VVD-OSM-2026-538MAL-2026-2089MAL-2026-2099VVD-OSM-2026-69GHSA-7v3c-wxfg-x5fgVVD-OSM-2026-26MAL-2026-2062VVD-OSM-2026-34VVD-OSM-2026-171GHSA-887f-wrq6-j685VVD-OSM-2026-162VVD-OSM-2026-66MAL-2026-1538VVD-OSM-2026-59MAL-2026-1527VVD-OSM-2026-15MAL-2026-2127MAL-2026-2246VVD-OSM-2026-81MAL-2026-2104VVD-OSM-2026-68VVD-OSM-2026-126VVD-OSM-2026-94VVD-OSM-2026-62VVD-OSM-2026-646GHSA-hqf3-9jfp-qgh9VVD-OSM-2026-260MAL-2026-1406MAL-2026-1410GHSA-h29v-mffh-vf54MAL-2026-1998GHSA-42g4-g458-9wx9MAL-2026-2242GHSA-q4j2-j63f-5vqxVVD-OSM-2026-256MAL-2026-2097VVD-OSM-2026-621MAL-2026-1288MAL-2026-1956VVD-OSM-2026-715MAL-2026-2155VVD-OSM-2026-570MAL-2026-2081VVD-OSM-2026-703MAL-2026-2047VVD-OSM-2026-48GHSA-j4p4-x5rc-96xxGHSA-mqvj-42pf-qv58VVD-OSM-2026-607MAL-2026-1939VVD-OSM-2026-3VVD-OSM-2026-708VVD-OSM-2026-727MAL-2026-1995MAL-2026-2240VVD-OSM-2026-690VVD-OSM-2026-262VVD-OSM-2026-645MAL-2026-1985VVD-OSM-2026-148VVD-OSM-2026-91MAL-2026-1947GHSA-r6qh-rm6v-7pvxGHSA-9xfj-83q4-hxj6VVD-OSM-2026-51VVD-OSM-2026-235VVD-OSM-2026-557GHSA-4wgw-h2cc-rpv6VVD-OSM-2026-666GHSA-3qmv-2h4m-5qg9GHSA-fppj-8rcf-8fppVVD-OSM-2026-544MAL-2026-1934MAL-2026-1086MAL-2026-1962MAL-2026-1044MAL-2026-2218VVD-OSM-2026-221VVD-OSM-2026-214MAL-2026-1926GHSA-3qf5-vfww-7p7gVVD-OSM-2026-535VVD-OSM-2026-55VVD-OSM-2026-16VVD-OSM-2026-226GHSA-ppr8-pvc2-8f99VVD-OSM-2026-664VVD-OSM-2026-53GHSA-fp44-gpc5-cc43VVD-OSM-2026-30MAL-2026-2161VVD-OSM-2026-707MAL-2026-1958VVD-OSM-2026-167VVD-OSM-2026-113VVD-OSM-2026-100VVD-OSM-2026-46VVD-OSM-2026-679GHSA-fr84-v3mx-mr9xMAL-2026-1927MAL-2026-1342VVD-OSM-2026-699VVD-OSM-2026-95GHSA-vpx7-g2h6-rq6cMAL-2026-2194MAL-2026-2163VVD-OSM-2026-643VVD-OSM-2026-178VVD-OSM-2026-114VVD-OSM-2026-581VVD-OSM-2026-663VVD-OSM-2026-6MAL-2026-1965GHSA-6rj6-xwm6-v698GHSA-r8j3-m86x-q66xVVD-OSM-2026-582MAL-2026-1978MAL-2026-2204GHSA-7hf8-rm28-2rm8VVD-OSM-2026-554GHSA-pjwm-q9hh-23wjVVD-OSM-2026-92MAL-2026-2018VVD-OSM-2026-726VVD-OSM-2026-119MAL-2026-1281VVD-OSM-2026-103GHSA-x24f-q36q-6pcjVVD-OSM-2026-84MAL-2026-2224VVD-OSM-2026-625VVD-OSM-2026-624VVD-OSM-2026-63MAL-2026-1407MAL-2026-1080VVD-OSM-2026-267VVD-OSM-2026-711MAL-2026-1235VVD-OSM-2026-67GHSA-8328-7r2v-2fq6GHSA-5xq6-c5wc-f6x9VVD-OSM-2026-123VVD-OSM-2026-674VVD-OSM-2026-58VVD-OSM-2026-134GHSA-jmx7-4g26-qp86VVD-OSM-2026-680GHSA-8m7g-rpw2-w26vGHSA-5w5v-cvxh-55vqVVD-OSM-2026-116MAL-2026-1240MAL-2026-1575VVD-OSM-2026-271MAL-2026-2162MAL-2026-1544MAL-2026-1996MAL-2026-1285MAL-2026-1558MAL-2026-1088VVD-OSM-2026-201VVD-OSM-2026-249GHSA-x49c-wrwr-8p2qVVD-OSM-2026-152VVD-OSM-2026-240GHSA-rjc8-xw63-3j4jVVD-OSM-2026-704VVD-OSM-2026-80VVD-OSM-2026-187VVD-OSM-2026-211VVD-OSM-2026-675GHSA-7fr9-gw6v-q3mwMAL-2026-1968MAL-2026-2074VVD-OSM-2026-165VVD-OSM-2026-258MAL-2026-2234VVD-OSM-2026-605GHSA-r6f4-p397-5xrjMAL-2026-1340VVD-OSM-2026-579GHSA-3m3c-wc3h-m5mrMAL-2026-1951VVD-OSM-2026-184VVD-OSM-2026-626VVD-OSM-2026-595VVD-OSM-2026-569VVD-OSM-2026-85VVD-OSM-2026-640MAL-2026-2015VVD-OSM-2026-21GHSA-9mp5-2jp4-wmwwGHSA-4p9p-g69r-jxv8VVD-OSM-2026-692MAL-2026-1409GHSA-8cpf-9rj8-q68mGHSA-mwq7-2fm8-vc4qGHSA-7fpm-p46r-h37gGHSA-6mrh-fqgr-9x68GHSA-58m2-f8rc-wwq2MAL-2026-2103MAL-2026-1969GHSA-w5g4-m76j-qxg7VVD-OSM-2026-99MAL-2026-2236MAL-2026-1563VVD-OSM-2026-89MAL-2026-2203VVD-OSM-2026-562MAL-2026-2133MAL-2026-1262VVD-OSM-2026-159VVD-OSM-2026-637VVD-OSM-2026-108VVD-OSM-2026-111MAL-2026-1223GHSA-jq28-7779-5hp9VVD-OSM-2026-65VVD-OSM-2026-611VVD-OSM-2026-537VVD-OSM-2026-247GHSA-pjmv-p8w4-fjq5GHSA-4h33-vfc6-f2hhMAL-2026-1990MAL-2026-1084MAL-2026-1438VVD-OSM-2026-12VVD-OSM-2026-623VVD-OSM-2026-725VVD-OSM-2026-602VVD-OSM-2026-655GHSA-x6m2-63j5-v6c7VVD-OSM-2026-599VVD-OSM-2026-608VVD-OSM-2026-545VVD-OSM-2026-188MAL-2026-1937VVD-OSM-2026-684MAL-2026-2090MAL-2026-1139MAL-2026-2187MAL-2026-1577VVD-OSM-2026-154MAL-2026-1090VVD-OSM-2026-694MAL-2026-2153VVD-OSM-2026-696VVD-OSM-2026-543MAL-2026-2216GHSA-2273-pvh3-9x6jVVD-OSM-2026-200MAL-2026-1378MAL-2026-1932VVD-OSM-2026-109VVD-OSM-2026-153GHSA-wp6r-9m2x-4h55VVD-OSM-2026-110MAL-2026-2220MAL-2026-1931VVD-OSM-2026-18VVD-OSM-2026-590VVD-OSM-2026-145VVD-OSM-2026-688MAL-2026-2160MAL-2026-2086MAL-2026-2077VVD-OSM-2026-82GHSA-j74c-w64f-9wg5GHSA-7xpm-vmrr-4rrvMAL-2026-2087GHSA-mvrx-3fqg-4hvhVVD-OSM-2026-47GHSA-p4gv-m838-2xq9VVD-OSM-2026-246MAL-2026-1287GHSA-p2f8-jq4c-jj37VVD-OSM-2026-225MAL-2026-2206MAL-2026-1579MAL-2026-1960MAL-2026-1564VVD-OSM-2026-252MAL-2026-1992MAL-2026-2248VVD-OSM-2026-7MAL-2026-2192MAL-2026-1982GHSA-f46r-3xg5-w2wmVVD-OSM-2026-644GHSA-m6hv-9gh4-4c85MAL-2026-1048MAL-2026-1952GHSA-2gfq-7ff6-3mr7VVD-OSM-2026-672GHSA-xmfj-5j3f-gx7xMAL-2026-1986GHSA-347h-frw7-j9f5MAL-2026-2040MAL-2026-1097MAL-2026-1966MAL-2026-1975VVD-OSM-2026-210VVD-OSM-2026-705VVD-OSM-2026-251MAL-2026-1291MAL-2026-2053MAL-2026-1099GHSA-jcwx-28x8-jf6fGHSA-x2c8-m9xp-3qmvVVD-OSM-2026-90MAL-2026-1941VVD-OSM-2026-135VVD-OSM-2026-208VVD-OSM-2026-160VVD-OSM-2026-239MAL-2026-1567VVD-OSM-2026-596VVD-OSM-2026-213VVD-OSM-2026-641MAL-2026-2102MAL-2026-1569VVD-OSM-2026-233MAL-2026-2037VVD-OSM-2026-72VVD-OSM-2026-64MAL-2026-2223MAL-2026-2135MAL-2026-1530MAL-2026-2185MAL-2026-2174VVD-OSM-2026-146VVD-OSM-2026-186VVD-OSM-2026-632VVD-OSM-2026-541VVD-OSM-2026-634VVD-OSM-2026-564GHSA-cp44-cvhx-wf33VVD-OSM-2026-612GHSA-r27q-f5jw-j5jpVVD-OSM-2026-151MAL-2026-2123MAL-2026-2064VVD-OSM-2026-1MAL-2026-2134MAL-2026-1241MAL-2026-1224MAL-2026-1578MAL-2026-1584VVD-OSM-2026-229VVD-OSM-2026-107VVD-OSM-2026-147VVD-OSM-2026-158VVD-OSM-2026-631GHSA-vf6p-p33f-3cjvGHSA-c5x7-f6qj-gc77MAL-2026-1970MAL-2026-2125VVD-OSM-2026-143VVD-OSM-2026-728VVD-OSM-2026-5GHSA-q93m-663h-q987GHSA-7x8p-2g3v-pwqpGHSA-82fx-cjgq-fc8vVVD-OSM-2026-122MAL-2026-1276VVD-OSM-2026-98VVD-OSM-2026-183MAL-2026-2159MAL-2026-1955VVD-OSM-2026-551MAL-2026-2009VVD-OSM-2026-49MAL-2026-1482VVD-OSM-2026-669VVD-OSM-2026-609MAL-2026-1559MAL-2026-1950VVD-OSM-2026-185MAL-2026-2243GHSA-7qv7-jx74-qhx9MAL-2026-1035VVD-OSM-2026-199MAL-2026-1019VVD-OSM-2026-622MAL-2026-2241VVD-OSM-2026-555VVD-OSM-2026-44VVD-OSM-2026-121MAL-2026-1976VVD-OSM-2026-615MAL-2026-2217MAL-2026-2219MAL-2026-1938VVD-OSM-2026-195VVD-OSM-2026-37VVD-OSM-2026-217VVD-OSM-2026-585MAL-2026-1543MAL-2026-1279MAL-2026-2179VVD-OSM-2026-215GHSA-gfm3-3p4f-m57wVVD-OSM-2026-677VVD-OSM-2026-718VVD-OSM-2026-231GHSA-x8xx-3mj7-337xGHSA-25q2-f9vw-3hf3VVD-OSM-2026-701MAL-2026-2196MAL-2026-1997VVD-OSM-2026-722VVD-OSM-2026-177MAL-2026-1972VVD-OSM-2026-40VVD-OSM-2026-198GHSA-r23r-8c7q-wm92MAL-2026-1517MAL-2026-1278MAL-2026-2010VVD-OSM-2026-120VVD-OSM-2026-268VVD-OSM-2026-14VVD-OSM-2026-245MAL-2026-1289VVD-OSM-2026-546MAL-2026-2105GHSA-f8qc-h6gw-x2vmVVD-OSM-2026-560MAL-2026-1480MAL-2026-1580GHSA-44fq-5mh8-r5hgVVD-OSM-2026-54VVD-OSM-2026-209MAL-2026-2111MAL-2026-2225VVD-OSM-2026-540MAL-2026-1138VVD-OSM-2026-138MAL-2026-2238GHSA-gmxq-2g92-63xvVVD-OSM-2026-647VVD-OSM-2026-50GHSA-xqxf-c9jr-8wx6VVD-OSM-2026-164VVD-OSM-2026-9VVD-OSM-2026-671VVD-OSM-2026-182MAL-2026-2063VVD-OSM-2026-248MAL-2026-2221VVD-OSM-2026-132VVD-OSM-2026-131GHSA-pjxj-7mxh-9348VVD-OSM-2026-173VVD-OSM-2026-112VVD-OSM-2026-130VVD-OSM-2026-118GHSA-34h2-gr5g-vc3jGHSA-7r3j-rgcw-3jgqMAL-2026-1350MAL-2026-2011GHSA-5w92-jfv8-ppvxVVD-OSM-2026-242MAL-2026-1582MAL-2026-1943MAL-2026-1091GHSA-6jcw-rcqg-wmmfMAL-2026-2190MAL-2026-2178VVD-OSM-2026-536VVD-OSM-2026-587GHSA-hmv2-22ff-cxh8MAL-2026-2169MAL-2026-2032GHSA-jvrr-w8mr-28hpMAL-2026-1142VVD-OSM-2026-24VVD-OSM-2026-243VVD-OSM-2026-717VVD-OSM-2026-636MAL-2026-2096MAL-2026-1581GHSA-3qf9-476p-8j7fGHSA-fr9v-hm5m-rv52VVD-OSM-2026-660VVD-OSM-2026-617VVD-OSM-2026-86MAL-2026-1971GHSA-8w5j-p4jv-8rmqVVD-OSM-2026-193VVD-OSM-2026-598VVD-OSM-2026-139VVD-OSM-2026-255VVD-OSM-2026-730VVD-OSM-2026-665MAL-2026-2100GHSA-64p5-3wp7-v4c9VVD-OSM-2026-592VVD-OSM-2026-651VVD-OSM-2026-667GHSA-9jg5-g7r5-p9f9GHSA-4g9r-2x44-gfm4MAL-2026-2198MAL-2026-1436VVD-OSM-2026-534GHSA-mrwh-gr28-36wvMAL-2026-1963MAL-2026-1954VVD-OSM-2026-115VVD-OSM-2026-4GHSA-mgm3-4q53-38p5VVD-OSM-2026-27VVD-OSM-2026-35MAL-2026-1422MAL-2026-2085VVD-OSM-2026-75VVD-OSM-2026-169MAL-2026-2075VVD-OSM-2026-613VVD-OSM-2026-685VVD-OSM-2026-659VVD-OSM-2026-181MAL-2026-2061MAL-2026-2126MAL-2026-2191VVD-OSM-2026-28GHSA-m7hw-fgmf-jwhrGHSA-6w74-x38v-9ffjVVD-OSM-2026-19VVD-OSM-2026-578VVD-OSM-2026-691MAL-2026-1959GHSA-5g2c-h3r8-6w3gGHSA-hc54-whg7-r7g2VVD-OSM-2026-73VVD-OSM-2026-180MAL-2026-1524VVD-OSM-2026-20MAL-2026-2131MAL-2026-1435GHSA-2rj8-6crh-98qqVVD-OSM-2026-87VVD-OSM-2026-141GHSA-wcrr-xhm3-j3x9GHSA-gmvg-736c-7g9fVVD-OSM-2026-642MAL-2026-1572GHSA-hpqp-f9r8-f725VVD-OSM-2026-561VVD-OSM-2026-189MAL-2026-1964VVD-OSM-2026-629MAL-2026-1141VVD-OSM-2026-702GHSA-9wmg-m3mr-xx93GHSA-vrqq-pxvj-f2mgVVD-OSM-2026-190VVD-OSM-2026-583MAL-2026-1557MAL-2026-1049MAL-2026-2048VVD-OSM-2026-706MAL-2026-1296MAL-2026-2156VVD-OSM-2026-681GHSA-xq57-xcgm-9q8qMAL-2026-2088VVD-OSM-2026-731VVD-OSM-2026-77VVD-OSM-2026-724GHSA-qxf6-x9c5-qxr4GHSA-hqj8-x2vp-mrp9MAL-2026-2008VVD-OSM-2026-687VVD-OSM-2026-32VVD-OSM-2026-29VVD-OSM-2026-658VVD-OSM-2026-661VVD-OSM-2026-559VVD-OSM-2026-45GHSA-p5gg-75q6-vp64GHSA-cv8h-5j9m-x3rcMAL-2026-2229MAL-2026-2110VVD-OSM-2026-253GHSA-gv85-mrvr-pgchMAL-2026-1957VVD-OSM-2026-616VVD-OSM-2026-234VVD-OSM-2026-652MAL-2026-1979VVD-OSM-2026-552MAL-2026-2130GHSA-69cx-hr8r-mc9jGHSA-gphq-fq72-qxwrVVD-OSM-2026-42GHSA-h95x-pph2-h496VVD-OSM-2026-11GHSA-9cwp-m29q-hmgrVVD-OSM-2026-128GHSA-82f5-93r9-hhwqMAL-2026-1565MAL-2026-1946MAL-2026-1566MAL-2026-1944VVD-OSM-2026-568MAL-2026-1561MAL-2026-1568MAL-2026-1089GHSA-wv5m-jqq3-c22xGHSA-8vmq-w85q-4q4jMAL-2026-1092VVD-OSM-2026-144GHSA-px82-m72x-rpj7VVD-OSM-2026-589GHSA-38c4-cmg5-vpvcGHSA-j836-pcqv-w9c9VVD-OSM-2026-172VVD-OSM-2026-176MAL-2026-1521VVD-OSM-2026-241GHSA-fgvm-3g6v-ppjfVVD-OSM-2026-222VVD-OSM-2026-682VVD-OSM-2026-196GHSA-39vv-2g62-pp83MAL-2026-1431VVD-OSM-2026-250VVD-OSM-2026-697VVD-OSM-2026-88VVD-OSM-2026-13GHSA-52hw-wvx9-x8pqGHSA-8f57-hh49-gmqfVVD-OSM-2026-594VVD-OSM-2026-266VVD-OSM-2026-533MAL-2026-1063MAL-2026-1432GHSA-28w8-cpp5-g448VVD-OSM-2026-117VVD-OSM-2026-620MAL-2026-2080VVD-OSM-2026-548VVD-OSM-2026-689VVD-OSM-2026-574MAL-2026-2055VVD-OSM-2026-270MAL-2026-1988VVD-OSM-2026-662VVD-OSM-2026-627VVD-OSM-2026-230VVD-OSM-2026-236VVD-OSM-2026-8VVD-OSM-2026-649GHSA-5g7h-cvvx-x96cGHSA-2phg-9x97-9759MAL-2026-2235MAL-2026-2007VVD-OSM-2026-588GHSA-wgjr-2vhj-qwv7MAL-2026-2092GHSA-76ph-2x99-486xMAL-2026-2019GHSA-vvwp-x2vx-wxpfVVD-OSM-2026-105MAL-2026-1434MAL-2026-1981VVD-OSM-2026-166MAL-2026-1533MAL-2026-1295MAL-2026-1098MAL-2026-1574VVD-OSM-2026-70MAL-2026-2164GHSA-3fjh-jjvh-r58hGHSA-3hr5-9jhx-97c5MAL-2026-2091VVD-OSM-2026-600VVD-OSM-2026-137GHSA-w977-mj56-jpc7VVD-OSM-2026-197VVD-OSM-2026-206VVD-OSM-2026-150VVD-OSM-2026-219MAL-2026-2003GHSA-7qgj-3cfq-g4g4MAL-2026-2082VVD-OSM-2026-698VVD-OSM-2026-71VVD-OSM-2026-97VVD-OSM-2026-218GHSA-p885-4m86-h35rGHSA-g4q9-p378-mc3gVVD-OSM-2026-101MAL-2026-1351MAL-2026-2005VVD-OSM-2026-192VVD-OSM-2026-676VVD-OSM-2026-580MAL-2026-2002MAL-2026-2245MAL-2026-2226MAL-2026-2181MAL-2026-1064MAL-2026-2095VVD-OSM-2026-203MAL-2026-1280MAL-2026-2207VVD-OSM-2026-136VVD-OSM-2026-61VVD-OSM-2026-700MAL-2026-2168GHSA-f6jh-hc8p-xpfxVVD-OSM-2026-635MAL-2026-1294MAL-2026-1974VVD-OSM-2026-93VVD-OSM-2026-603VVD-OSM-2026-22VVD-OSM-2026-597GHSA-f6pq-884h-rjxqGHSA-69jj-c93h-67p2VVD-OSM-2026-614VVD-OSM-2026-550GHSA-4xcw-mhqm-x332MAL-2026-1225VVD-OSM-2026-606VVD-OSM-2026-709VVD-OSM-2026-264MAL-2026-1945VVD-OSM-2026-656GHSA-53rc-g3gw-946rVVD-OSM-2026-60VVD-OSM-2026-265MAL-2026-1980MAL-2026-1479VVD-OSM-2026-556MAL-2026-2186GHSA-jhvp-qr9c-qg9pVVD-OSM-2026-23VVD-OSM-2026-125GHSA-q46m-r8wj-v4p9MAL-2026-1570GHSA-8g7v-w2f5-7gw2GHSA-9674-vwjj-qxjpGHSA-c93f-8832-92qwMAL-2026-2001MAL-2026-1498VVD-OSM-2026-202VVD-OSM-2026-729MAL-2026-2129VVD-OSM-2026-584MAL-2026-2060MAL-2026-1529GHSA-6jrx-v84r-9g5mVVD-OSM-2026-683VVD-OSM-2026-630VVD-OSM-2026-723MAL-2026-2128GHSA-jffg-8cwf-786hVVD-OSM-2026-712VVD-OSM-2026-56GHSA-cxvr-pcxc-6r58VVD-OSM-2026-179GHSA-24fv-r862-wg4cVVD-OSM-2026-261VVD-OSM-2026-205MAL-2026-1488VVD-OSM-2026-618VVD-OSM-2026-558MAL-2026-1987VVD-OSM-2026-237MAL-2026-1339MAL-2026-1284MAL-2026-2193VVD-OSM-2026-129VVD-OSM-2026-653VVD-OSM-2026-263MAL-2026-1925GHSA-hqvw-49vr-fpw3VVD-OSM-2026-41VVD-OSM-2026-194VVD-OSM-2026-720VVD-OSM-2026-216VVD-OSM-2026-565MAL-2026-2157MAL-2026-1499VVD-OSM-2026-207MAL-2026-2154VVD-OSM-2026-142GHSA-p7pv-mfpq-4rfgVVD-OSM-2026-566GHSA-74r2-ggvc-h778MAL-2026-2076VVD-OSM-2026-254GHSA-mg5x-ww4x-j322VVD-OSM-2026-175VVD-OSM-2026-610MAL-2026-1942VVD-OSM-2026-25MAL-2026-2228VVD-OSM-2026-553MAL-2026-2195GHSA-36wg-c889-h26jVVD-OSM-2026-272GHSA-3j5q-xvjq-rqxqGHSA-767f-p685-mw32MAL-2026-1523VVD-OSM-2026-648GHSA-52w3-g4x3-xw3hVVD-OSM-2026-33VVD-OSM-2026-127VVD-OSM-2026-204MAL-2026-2079VVD-OSM-2026-10VVD-OSM-2026-57MAL-2026-1973MAL-2026-1949VVD-OSM-2026-710MAL-2026-2098MAL-2026-1573VVD-OSM-2026-52MAL-2026-2188VVD-OSM-2026-220GHSA-7w6q-gfxv-393vVVD-OSM-2026-719VVD-OSM-2026-639MAL-2026-1948MAL-2026-2199GHSA-c39r-4xjc-wrcvVVD-OSM-2026-74MAL-2026-1277GHSA-9php-8vxv-7gmxMAL-2026-2000MAL-2026-2101VVD-OSM-2026-79VVD-OSM-2026-542GHSA-87mp-vrm9-h8r5VVD-OSM-2026-269VVD-OSM-2026-78VVD-OSM-2026-695GHSA-qw8c-w97q-7p7pMAL-2026-1082VVD-OSM-2026-657VVD-OSM-2026-670VVD-OSM-2026-170VVD-OSM-2026-224VVD-OSM-2026-83GHSA-jfqc-55rq-mm3jVVD-OSM-2026-106MAL-2026-1437MAL-2026-2165MAL-2026-1283GHSA-jrpm-f5xg-3frjGHSA-5q3v-cjxm-6cgmMAL-2026-1341MAL-2026-2239MAL-2026-2247MAL-2026-2197VVD-OSM-2026-17MAL-2026-1226VVD-OSM-2026-257MAL-2026-2244VVD-OSM-2026-633GHSA-wwjg-c6fp-6648VVD-OSM-2026-732VVD-OSM-2026-575GHSA-f9m8-w27f-mxr3

References

Malicious nuget package: Stl.RestEase.Net
advisory
vendor
Malicious nuget package: Stl.Fusion.Ext.Contracts.Net
advisory
vendor
Malicious nuget package: Stl.Fusion.Ext.Services.Net
advisory
vendor
Malicious pypi package: hostlists-plugins-default
advisory
advisory
vendor

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›