VDB
GCVE-VVD-OSM-2026-198
GCVE-VVD-OSM-2026-198
Advisory PublishedCVSS 5.4/10
Suspicious package detected. Behaviors: data exfiltration.
Payload: robloxapi/evil.pth
IOCs:
- urls: https://badges.roblox.com, https://badges.roblox.com/v1, https://catalog.roblox.com, https://catalog.roblox.com/v1, https://catalog.roblox.com/v2 (+18 more)
- domains: MANIFEST.in, roblox.com, badges.roblox.com, catalog.roblox.com, economy.roblox.com (+8 more)
- payloadFileHash: 7e4ed702456bea0101a2495b0d0d2524b80cd84a2fbe646503dab3e13af10593
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | finch-rust | all (affected), all (affected), all (affected), all (affected), all (affected), all (affected) | — |
| unknown | robloxapi-testy | all (affected) | — |
| unknown | sha-rust | all (affected) | — |
| unknown | geocommunes-geoportal | all (affected), all (affected), all (affected), all (affected) | — |
| unknown | neural-compressor-jax | all (affected), all (affected), all (affected), all (affected) | — |
Aliases
Transitive aliases
VVD-OSM-2026-200GHSA-f6jh-hc8p-xpfxVVD-OSM-2026-600VVD-OSM-2026-204VVD-OSM-2026-657VVD-OSM-2026-217MAL-2026-2184MAL-2026-2218MAL-2026-1280MAL-2026-1992VVD-OSM-2026-133MAL-2026-2134VVD-OSM-2026-271MAL-2026-2079MAL-2026-1564MAL-2026-2164VVD-OSM-2026-660MAL-2026-1064VVD-OSM-2026-209MAL-2026-1951MAL-2026-2060VVD-OSM-2026-66VVD-OSM-2026-231VVD-OSM-2026-596GHSA-hfhc-gmgj-9v7vMAL-2026-2191VVD-OSM-2026-593VVD-OSM-2026-594VVD-OSM-2026-188VVD-OSM-2026-638VVD-OSM-2026-144MAL-2026-1934MAL-2026-1498VVD-OSM-2026-101VVD-OSM-2026-259VVD-OSM-2026-556GHSA-5xq6-c5wc-f6x9VVD-OSM-2026-94GHSA-r934-qgg3-v7fgMAL-2026-1435VVD-OSM-2026-633VVD-OSM-2026-643MAL-2026-2053VVD-OSM-2026-712MAL-2026-2243VVD-OSM-2026-29GHSA-pjwm-q9hh-23wjGHSA-fr9v-hm5m-rv52VVD-OSM-2026-541VVD-OSM-2026-227MAL-2026-1409GHSA-fr84-v3mx-mr9xVVD-OSM-2026-672VVD-OSM-2026-210MAL-2026-1092GHSA-f582-qpjg-gx9hMAL-2026-1570VVD-OSM-2026-164VVD-OSM-2026-239VVD-OSM-2026-546GHSA-3qmv-2h4m-5qg9VVD-OSM-2026-206MAL-2026-1946MAL-2026-1226MAL-2026-1412MAL-2026-2245GHSA-q93m-663h-q987VVD-OSM-2026-717GHSA-2rj8-6crh-98qqVVD-OSM-2026-640MAL-2026-1291MAL-2026-2186GHSA-hqj8-x2vp-mrp9MAL-2026-2037VVD-OSM-2026-257VVD-OSM-2026-135MAL-2026-1225MAL-2026-1235GHSA-jcwx-28x8-jf6fVVD-OSM-2026-110MAL-2026-2197VVD-OSM-2026-567VVD-OSM-2026-268GHSA-76ph-2x99-486xMAL-2026-2179MAL-2026-2225GHSA-j836-pcqv-w9c9GHSA-3hr5-9jhx-97c5GHSA-28w8-cpp5-g448VVD-OSM-2026-143VVD-OSM-2026-175MAL-2026-1141VVD-OSM-2026-71VVD-OSM-2026-616VVD-OSM-2026-578GHSA-f6pq-884h-rjxqGHSA-mwq7-2fm8-vc4qMAL-2026-1523MAL-2026-1091VVD-OSM-2026-272VVD-OSM-2026-637MAL-2026-2047VVD-OSM-2026-252VVD-OSM-2026-86VVD-OSM-2026-222VVD-OSM-2026-49MAL-2026-1432VVD-OSM-2026-100MAL-2026-2206GHSA-887f-wrq6-j685GHSA-4h33-vfc6-f2hhGHSA-h95x-pph2-h496GHSA-g4q9-p378-mc3gMAL-2026-1080MAL-2026-2101VVD-OSM-2026-44VVD-OSM-2026-136MAL-2026-1943VVD-OSM-2026-56VVD-OSM-2026-619MAL-2026-2181VVD-OSM-2026-636MAL-2026-1574VVD-OSM-2026-166GHSA-2rjv-fxjc-xwmvVVD-OSM-2026-676VVD-OSM-2026-77GHSA-2gfq-7ff6-3mr7GHSA-42g4-g458-9wx9MAL-2026-1406VVD-OSM-2026-170GHSA-44fq-5mh8-r5hgGHSA-2phg-9x97-9759VVD-OSM-2026-689MAL-2026-1019VVD-OSM-2026-33VVD-OSM-2026-588MAL-2026-1138GHSA-mvrx-3fqg-4hvhVVD-OSM-2026-125VVD-OSM-2026-269GHSA-8f57-hh49-gmqfVVD-OSM-2026-189MAL-2026-1970VVD-OSM-2026-684MAL-2026-2110VVD-OSM-2026-224VVD-OSM-2026-585MAL-2026-1583VVD-OSM-2026-105VVD-OSM-2026-693MAL-2026-2073MAL-2026-1966VVD-OSM-2026-148MAL-2026-1098VVD-OSM-2026-630VVD-OSM-2026-28MAL-2026-2080VVD-OSM-2026-20MAL-2026-1985GHSA-7fr9-gw6v-q3mwGHSA-gphq-fq72-qxwrMAL-2026-1339VVD-OSM-2026-249VVD-OSM-2026-570MAL-2026-2092GHSA-mgm3-4q53-38p5VVD-OSM-2026-197GHSA-5w5v-cvxh-55vqGHSA-6w26-75vp-gf97MAL-2026-2104MAL-2026-1529MAL-2026-1579VVD-OSM-2026-250GHSA-fgvm-3g6v-ppjfMAL-2026-2005GHSA-9mp5-2jp4-wmwwMAL-2026-1956VVD-OSM-2026-220VVD-OSM-2026-213VVD-OSM-2026-89GHSA-7v3c-wxfg-x5fgVVD-OSM-2026-3MAL-2026-2161VVD-OSM-2026-674VVD-OSM-2026-615MAL-2026-1407MAL-2026-2094GHSA-r6qh-rm6v-7pvxVVD-OSM-2026-566VVD-OSM-2026-561MAL-2026-1560MAL-2026-2098VVD-OSM-2026-169GHSA-4gc2-gg24-6qf6MAL-2026-1295VVD-OSM-2026-535VVD-OSM-2026-634MAL-2026-1969MAL-2026-1559VVD-OSM-2026-161GHSA-9jg5-g7r5-p9f9VVD-OSM-2026-84VVD-OSM-2026-603MAL-2026-1584MAL-2026-1279VVD-OSM-2026-571VVD-OSM-2026-584GHSA-wwjg-c6fp-6648GHSA-36wg-c889-h26jGHSA-gmxq-2g92-63xvVVD-OSM-2026-116VVD-OSM-2026-218MAL-2026-2176MAL-2026-2229GHSA-wp6r-9m2x-4h55VVD-OSM-2026-103MAL-2026-1968GHSA-fp44-gpc5-cc43MAL-2026-1939GHSA-hqf3-9jfp-qgh9GHSA-52w3-g4x3-xw3hMAL-2026-1959VVD-OSM-2026-267MAL-2026-1978VVD-OSM-2026-668GHSA-87mp-vrm9-h8r5VVD-OSM-2026-114MAL-2026-2195VVD-OSM-2026-55GHSA-jq28-7779-5hp9VVD-OSM-2026-622VVD-OSM-2026-38MAL-2026-1973VVD-OSM-2026-216VVD-OSM-2026-245VVD-OSM-2026-716GHSA-q4j2-j63f-5vqxVVD-OSM-2026-43MAL-2026-2111GHSA-c39r-4xjc-wrcvVVD-OSM-2026-564MAL-2026-1972VVD-OSM-2026-221VVD-OSM-2026-104VVD-OSM-2026-680VVD-OSM-2026-9VVD-OSM-2026-35MAL-2026-1961MAL-2026-1224VVD-OSM-2026-73VVD-OSM-2026-704VVD-OSM-2026-205GHSA-9674-vwjj-qxjpMAL-2026-1995MAL-2026-1976MAL-2026-2040MAL-2026-1284GHSA-vvwp-x2vx-wxpfGHSA-24fv-r862-wg4cVVD-OSM-2026-30VVD-OSM-2026-140GHSA-p7pv-mfpq-4rfgMAL-2026-1942MAL-2026-2156GHSA-h29v-mffh-vf54VVD-OSM-2026-63GHSA-4g9r-2x44-gfm4MAL-2026-2223VVD-OSM-2026-670GHSA-cp44-cvhx-wf33VVD-OSM-2026-91VVD-OSM-2026-691VVD-OSM-2026-32VVD-OSM-2026-662VVD-OSM-2026-552GHSA-52hw-wvx9-x8pqVVD-OSM-2026-701VVD-OSM-2026-261VVD-OSM-2026-554MAL-2026-1296VVD-OSM-2026-547MAL-2026-2063VVD-OSM-2026-711VVD-OSM-2026-8VVD-OSM-2026-563GHSA-5g7h-cvvx-x96cVVD-OSM-2026-617MAL-2026-1140VVD-OSM-2026-214MAL-2026-1530MAL-2026-1580VVD-OSM-2026-659VVD-OSM-2026-80GHSA-fm43-2f72-p329VVD-OSM-2026-194VVD-OSM-2026-573VVD-OSM-2026-548VVD-OSM-2026-146GHSA-x6m2-63j5-v6c7VVD-OSM-2026-671VVD-OSM-2026-598MAL-2026-1572MAL-2026-2095MAL-2026-2082VVD-OSM-2026-158GHSA-f8qc-h6gw-x2vmVVD-OSM-2026-550MAL-2026-1950GHSA-hqvw-49vr-fpw3GHSA-53rc-g3gw-946rVVD-OSM-2026-223VVD-OSM-2026-618VVD-OSM-2026-123VVD-OSM-2026-185GHSA-p885-4m86-h35rMAL-2026-2199VVD-OSM-2026-606VVD-OSM-2026-83VVD-OSM-2026-149MAL-2026-1294VVD-OSM-2026-120VVD-OSM-2026-107GHSA-9wmg-m3mr-xx93VVD-OSM-2026-559GHSA-f8cx-966c-8x2hMAL-2026-2196MAL-2026-1139MAL-2026-1931VVD-OSM-2026-243VVD-OSM-2026-10GHSA-fppj-8rcf-8fppVVD-OSM-2026-246MAL-2026-2154VVD-OSM-2026-4GHSA-69cx-hr8r-mc9jVVD-OSM-2026-159VVD-OSM-2026-11VVD-OSM-2026-156VVD-OSM-2026-229VVD-OSM-2026-696VVD-OSM-2026-702MAL-2026-1941VVD-OSM-2026-138GHSA-r6f4-p397-5xrjGHSA-gfm3-3p4f-m57wGHSA-82f5-93r9-hhwqVVD-OSM-2026-673VVD-OSM-2026-620VVD-OSM-2026-193MAL-2026-1957VVD-OSM-2026-132MAL-2026-1927VVD-OSM-2026-67GHSA-8328-7r2v-2fq6MAL-2026-1277MAL-2026-2216MAL-2026-1962MAL-2026-2241MAL-2026-2105GHSA-mqvj-42pf-qv58MAL-2026-2187MAL-2026-1575MAL-2026-2064VVD-OSM-2026-695MAL-2026-1410VVD-OSM-2026-13VVD-OSM-2026-608GHSA-3qf9-476p-8j7fVVD-OSM-2026-109MAL-2026-2153VVD-OSM-2026-592MAL-2026-1926VVD-OSM-2026-39MAL-2026-1482MAL-2026-1479VVD-OSM-2026-661VVD-OSM-2026-626MAL-2026-1240VVD-OSM-2026-167MAL-2026-1983VVD-OSM-2026-586MAL-2026-2123VVD-OSM-2026-678MAL-2026-2235VVD-OSM-2026-632VVD-OSM-2026-628VVD-OSM-2026-25VVD-OSM-2026-60MAL-2026-2166MAL-2026-2198MAL-2026-2190MAL-2026-2160VVD-OSM-2026-119VVD-OSM-2026-57VVD-OSM-2026-202VVD-OSM-2026-78VVD-OSM-2026-126MAL-2026-1958VVD-OSM-2026-641VVD-OSM-2026-155MAL-2026-2007VVD-OSM-2026-201VVD-OSM-2026-174MAL-2026-2048GHSA-p4gv-m838-2xq9MAL-2026-1974VVD-OSM-2026-228GHSA-hmv2-22ff-cxh8VVD-OSM-2026-14VVD-OSM-2026-613VVD-OSM-2026-575VVD-OSM-2026-582VVD-OSM-2026-203VVD-OSM-2026-21VVD-OSM-2026-42MAL-2026-1975MAL-2026-2244MAL-2026-1582MAL-2026-2194MAL-2026-2159MAL-2026-2242GHSA-jhvp-qr9c-qg9pVVD-OSM-2026-234MAL-2026-1521MAL-2026-2129MAL-2026-2185VVD-OSM-2026-254MAL-2026-1262MAL-2026-2192VVD-OSM-2026-127VVD-OSM-2026-23GHSA-7g9x-834j-4788GHSA-jfqc-55rq-mm3jVVD-OSM-2026-690GHSA-6mrh-fqgr-9x68VVD-OSM-2026-677MAL-2026-2075MAL-2026-2188MAL-2026-1952VVD-OSM-2026-168VVD-OSM-2026-96MAL-2026-1953VVD-OSM-2026-179MAL-2026-2001GHSA-rjc8-xw63-3j4jMAL-2026-1986MAL-2026-1565VVD-OSM-2026-40VVD-OSM-2026-560VVD-OSM-2026-569GHSA-f9m8-w27f-mxr3GHSA-7qgj-3cfq-g4g4VVD-OSM-2026-730VVD-OSM-2026-258MAL-2026-1283VVD-OSM-2026-251VVD-OSM-2026-572VVD-OSM-2026-46VVD-OSM-2026-568MAL-2026-1568VVD-OSM-2026-225VVD-OSM-2026-589MAL-2026-1434MAL-2026-2133VVD-OSM-2026-6VVD-OSM-2026-208GHSA-767f-p685-mw32GHSA-7qv7-jx74-qhx9MAL-2026-1981MAL-2026-1581VVD-OSM-2026-247MAL-2026-1099VVD-OSM-2026-705MAL-2026-1422VVD-OSM-2026-58MAL-2026-2090MAL-2026-2076MAL-2026-2248VVD-OSM-2026-625MAL-2026-2238VVD-OSM-2026-663VVD-OSM-2026-18GHSA-p427-hrfp-pc52MAL-2026-1544VVD-OSM-2026-698VVD-OSM-2026-558VVD-OSM-2026-90VVD-OSM-2026-713VVD-OSM-2026-115VVD-OSM-2026-262MAL-2026-1569MAL-2026-2097VVD-OSM-2026-172GHSA-m6hv-9gh4-4c85GHSA-7fpm-p46r-h37gVVD-OSM-2026-236VVD-OSM-2026-574GHSA-r8j3-m86x-q66xMAL-2026-1954VVD-OSM-2026-187VVD-OSM-2026-151VVD-OSM-2026-211MAL-2026-1979VVD-OSM-2026-226VVD-OSM-2026-241VVD-OSM-2026-180VVD-OSM-2026-599MAL-2026-1089VVD-OSM-2026-256MAL-2026-2019MAL-2026-1431VVD-OSM-2026-2VVD-OSM-2026-240MAL-2026-2009VVD-OSM-2026-669MAL-2026-2240VVD-OSM-2026-255MAL-2026-2062GHSA-38c4-cmg5-vpvcMAL-2026-1090MAL-2026-2217VVD-OSM-2026-665VVD-OSM-2026-260VVD-OSM-2026-685VVD-OSM-2026-533GHSA-6w74-x38v-9ffjGHSA-hc54-whg7-r7g2VVD-OSM-2026-79MAL-2026-2165VVD-OSM-2026-565MAL-2026-1342VVD-OSM-2026-92MAL-2026-1438VVD-OSM-2026-652GHSA-6jrx-v84r-9g5mGHSA-4xcw-mhqm-x332MAL-2026-2168MAL-2026-2200MAL-2026-1932MAL-2026-2246MAL-2026-1281VVD-OSM-2026-699VVD-OSM-2026-45VVD-OSM-2026-642MAL-2026-2207GHSA-5q3v-cjxm-6cgmMAL-2026-1980MAL-2026-1965VVD-OSM-2026-232GHSA-58m2-f8rc-wwq2MAL-2026-2061VVD-OSM-2026-219GHSA-wv5m-jqq3-c22xVVD-OSM-2026-74MAL-2026-2174VVD-OSM-2026-687VVD-OSM-2026-47VVD-OSM-2026-131MAL-2026-2032MAL-2026-1241MAL-2026-2089MAL-2026-1937MAL-2026-1577MAL-2026-1947VVD-OSM-2026-694GHSA-rm67-f2rf-9fwfVVD-OSM-2026-591VVD-OSM-2026-727VVD-OSM-2026-645VVD-OSM-2026-688GHSA-gmvg-736c-7g9fVVD-OSM-2026-614VVD-OSM-2026-248GHSA-pjmv-p8w4-fjq5VVD-OSM-2026-579MAL-2026-1088VVD-OSM-2026-655VVD-OSM-2026-729VVD-OSM-2026-195VVD-OSM-2026-102VVD-OSM-2026-150GHSA-4p9p-g69r-jxv8GHSA-25q2-f9vw-3hf3MAL-2026-1433MAL-2026-1977MAL-2026-2008VVD-OSM-2026-12VVD-OSM-2026-230MAL-2026-1955VVD-OSM-2026-72VVD-OSM-2026-724MAL-2026-1488VVD-OSM-2026-130VVD-OSM-2026-124GHSA-w977-mj56-jpc7GHSA-82fx-cjgq-fc8vVVD-OSM-2026-244GHSA-jffg-8cwf-786hVVD-OSM-2026-99VVD-OSM-2026-542MAL-2026-1567MAL-2026-1538VVD-OSM-2026-112GHSA-cxvr-pcxc-6r58VVD-OSM-2026-191MAL-2026-2000GHSA-ppr8-pvc2-8f99MAL-2026-2220VVD-OSM-2026-715GHSA-95h8-q9jh-jjwfGHSA-q46m-r8wj-v4p9MAL-2026-1340MAL-2026-2247GHSA-64p5-3wp7-v4c9VVD-OSM-2026-24VVD-OSM-2026-7MAL-2026-2204GHSA-3m3c-wc3h-m5mrVVD-OSM-2026-147VVD-OSM-2026-160GHSA-qxf6-x9c5-qxr4GHSA-pjxj-7mxh-9348MAL-2026-2136VVD-OSM-2026-732VVD-OSM-2026-646GHSA-9m98-jvf5-jxx5GHSA-cqxq-2582-f357VVD-OSM-2026-653VVD-OSM-2026-199VVD-OSM-2026-557GHSA-8g7v-w2f5-7gw2MAL-2026-2091VVD-OSM-2026-173MAL-2026-1982VVD-OSM-2026-184VVD-OSM-2026-266VVD-OSM-2026-48GHSA-9xfj-83q4-hxj6MAL-2026-2093VVD-OSM-2026-162MAL-2026-2167VVD-OSM-2026-183MAL-2026-1998MAL-2026-1222GHSA-r27q-f5jw-j5jpVVD-OSM-2026-612MAL-2026-2055VVD-OSM-2026-682MAL-2026-1949MAL-2026-1971MAL-2026-1935VVD-OSM-2026-610VVD-OSM-2026-111VVD-OSM-2026-719VVD-OSM-2026-540VVD-OSM-2026-635VVD-OSM-2026-725MAL-2026-1578MAL-2026-1527VVD-OSM-2026-658VVD-OSM-2026-141MAL-2026-1097VVD-OSM-2026-629MAL-2026-1517VVD-OSM-2026-128VVD-OSM-2026-50GHSA-4wgw-h2cc-rpv6GHSA-8vmq-w85q-4q4jMAL-2026-1987MAL-2026-1063MAL-2026-2233MAL-2026-2228VVD-OSM-2026-611GHSA-xpmv-42gw-w7wcGHSA-wgjr-2vhj-qwv7GHSA-74r2-ggvc-h778VVD-OSM-2026-5GHSA-3qf5-vfww-7p7gMAL-2026-2088MAL-2026-1276MAL-2026-1499VVD-OSM-2026-265VVD-OSM-2026-97VVD-OSM-2026-62MAL-2026-1325MAL-2026-1290GHSA-2prc-m9c3-jgwpVVD-OSM-2026-605MAL-2026-1287MAL-2026-1044VVD-OSM-2026-181MAL-2026-1940VVD-OSM-2026-88VVD-OSM-2026-22GHSA-8cpf-9rj8-q68mMAL-2026-2099VVD-OSM-2026-543MAL-2026-1378GHSA-x49c-wrwr-8p2qVVD-OSM-2026-644VVD-OSM-2026-651MAL-2026-2226MAL-2026-2077VVD-OSM-2026-714VVD-OSM-2026-664MAL-2026-2203GHSA-69jj-c93h-67p2GHSA-3j5q-xvjq-rqxqMAL-2026-2096VVD-OSM-2026-545MAL-2026-1558VVD-OSM-2026-580VVD-OSM-2026-52VVD-OSM-2026-654VVD-OSM-2026-621VVD-OSM-2026-122MAL-2026-2221VVD-OSM-2026-595VVD-OSM-2026-93VVD-OSM-2026-190GHSA-r54j-4cj8-jf2vVVD-OSM-2026-215MAL-2026-1223MAL-2026-1945GHSA-hpqp-f9r8-f725VVD-OSM-2026-708VVD-OSM-2026-129MAL-2026-2219VVD-OSM-2026-15VVD-OSM-2026-555VVD-OSM-2026-186MAL-2026-2224VVD-OSM-2026-65VVD-OSM-2026-37VVD-OSM-2026-64MAL-2026-1411VVD-OSM-2026-242VVD-OSM-2026-117GHSA-h2h6-q29m-3mm3VVD-OSM-2026-142VVD-OSM-2026-604GHSA-wcrr-xhm3-j3x9GHSA-c5x7-f6qj-gc77VVD-OSM-2026-686VVD-OSM-2026-165VVD-OSM-2026-710MAL-2026-2002VVD-OSM-2026-16GHSA-7hf8-rm28-2rm8MAL-2026-2010VVD-OSM-2026-544VVD-OSM-2026-121VVD-OSM-2026-27VVD-OSM-2026-134MAL-2026-2130VVD-OSM-2026-656VVD-OSM-2026-551MAL-2026-1278VVD-OSM-2026-709VVD-OSM-2026-587VVD-OSM-2026-1MAL-2026-1524VVD-OSM-2026-649VVD-OSM-2026-69GHSA-x24f-q36q-6pcjGHSA-p2f8-jq4c-jj37VVD-OSM-2026-192VVD-OSM-2026-624GHSA-6jcw-rcqg-wmmfMAL-2026-2132GHSA-8w5j-p4jv-8rmqGHSA-34h2-gr5g-vc3jVVD-OSM-2026-583MAL-2026-1480MAL-2026-2126GHSA-5w92-jfv8-ppvxVVD-OSM-2026-722MAL-2026-1286VVD-OSM-2026-137VVD-OSM-2026-647MAL-2026-1351MAL-2026-2102MAL-2026-2100VVD-OSM-2026-706MAL-2026-1988VVD-OSM-2026-51MAL-2026-1543MAL-2026-2103GHSA-j4p4-x5rc-96xxVVD-OSM-2026-723MAL-2026-2234VVD-OSM-2026-153GHSA-px82-m72x-rpj7VVD-OSM-2026-623GHSA-qw8c-w97q-7p7pMAL-2026-1136MAL-2026-1996VVD-OSM-2026-562MAL-2026-2015MAL-2026-1289MAL-2026-1288MAL-2026-1142VVD-OSM-2026-19VVD-OSM-2026-648VVD-OSM-2026-692VVD-OSM-2026-177GHSA-cv8h-5j9m-x3rcVVD-OSM-2026-95MAL-2026-1263MAL-2026-1563GHSA-jmx7-4g26-qp86VVD-OSM-2026-581VVD-OSM-2026-26VVD-OSM-2026-54VVD-OSM-2026-182GHSA-6rj6-xwm6-v698VVD-OSM-2026-703VVD-OSM-2026-171VVD-OSM-2026-607MAL-2026-1018MAL-2026-2155VVD-OSM-2026-212MAL-2026-2239VVD-OSM-2026-534MAL-2026-2081MAL-2026-1561VVD-OSM-2026-237MAL-2026-2189MAL-2026-1085GHSA-r23r-8c7q-wm92VVD-OSM-2026-681VVD-OSM-2026-82VVD-OSM-2026-639MAL-2026-2087VVD-OSM-2026-163VVD-OSM-2026-536GHSA-mg5x-ww4x-j322VVD-OSM-2026-549GHSA-3fjh-jjvh-r58hGHSA-jrpm-f5xg-3frjGHSA-9cwp-m29q-hmgrGHSA-x8xx-3mj7-337xVVD-OSM-2026-683VVD-OSM-2026-538MAL-2026-2169MAL-2026-1143VVD-OSM-2026-627VVD-OSM-2026-81VVD-OSM-2026-700MAL-2026-1437VVD-OSM-2026-590VVD-OSM-2026-59MAL-2026-1048MAL-2026-2193MAL-2026-1371VVD-OSM-2026-602MAL-2026-2018VVD-OSM-2026-154VVD-OSM-2026-707VVD-OSM-2026-726MAL-2026-1562VVD-OSM-2026-720GHSA-c93f-8832-92qwVVD-OSM-2026-601MAL-2026-2222GHSA-m7hw-fgmf-jwhrMAL-2026-1963VVD-OSM-2026-196MAL-2026-1082VVD-OSM-2026-113MAL-2026-1964GHSA-p5gg-75q6-vp64VVD-OSM-2026-139MAL-2026-2085VVD-OSM-2026-176MAL-2026-2074MAL-2026-2011VVD-OSM-2026-233MAL-2026-2157VVD-OSM-2026-34MAL-2026-1341VVD-OSM-2026-263MAL-2026-1997GHSA-7xpm-vmrr-4rrvGHSA-j74c-w64f-9wg5GHSA-39vv-2g62-pp83VVD-OSM-2026-697GHSA-5g2c-h3r8-6w3gMAL-2026-1925MAL-2026-1566MAL-2026-1938MAL-2026-1573GHSA-vpx7-g2h6-rq6cVVD-OSM-2026-76VVD-OSM-2026-17MAL-2026-1944GHSA-jvrr-w8mr-28hpMAL-2026-1285VVD-OSM-2026-675VVD-OSM-2026-152MAL-2026-2127VVD-OSM-2026-70VVD-OSM-2026-631VVD-OSM-2026-75VVD-OSM-2026-36VVD-OSM-2026-207GHSA-7w6q-gfxv-393vVVD-OSM-2026-61GHSA-xqxf-c9jr-8wx6GHSA-gv85-mrvr-pgchVVD-OSM-2026-537VVD-OSM-2026-270VVD-OSM-2026-157VVD-OSM-2026-106MAL-2026-2162VVD-OSM-2026-68VVD-OSM-2026-87GHSA-347h-frw7-j9f5GHSA-f46r-3xg5-w2wmMAL-2026-1049MAL-2026-2128GHSA-8m7g-rpw2-w26vMAL-2026-1350VVD-OSM-2026-145MAL-2026-2135VVD-OSM-2026-118MAL-2026-2003MAL-2026-2125VVD-OSM-2026-667GHSA-xmfj-5j3f-gx7xGHSA-9php-8vxv-7gmxMAL-2026-1275MAL-2026-1960MAL-2026-2236VVD-OSM-2026-609VVD-OSM-2026-718VVD-OSM-2026-238VVD-OSM-2026-31MAL-2026-1990VVD-OSM-2026-553MAL-2026-1436MAL-2026-2006VVD-OSM-2026-41GHSA-vf6p-p33f-3cjvVVD-OSM-2026-666GHSA-7r3j-rgcw-3jgqVVD-OSM-2026-264GHSA-86xp-4fvm-qm2pVVD-OSM-2026-235MAL-2026-1084VVD-OSM-2026-53VVD-OSM-2026-597MAL-2026-2178GHSA-6vcv-6xjg-jm7wVVD-OSM-2026-253VVD-OSM-2026-728MAL-2026-1557VVD-OSM-2026-577GHSA-xq57-xcgm-9q8qMAL-2026-2163VVD-OSM-2026-576VVD-OSM-2026-679MAL-2026-1086GHSA-mrwh-gr28-36wvVVD-OSM-2026-539MAL-2026-1261GHSA-7x8p-2g3v-pwqpVVD-OSM-2026-98VVD-OSM-2026-731VVD-OSM-2026-721VVD-OSM-2026-108MAL-2026-2131VVD-OSM-2026-85MAL-2026-1533GHSA-x2c8-m9xp-3qmvMAL-2026-1948GHSA-vrqq-pxvj-f2mgGHSA-2273-pvh3-9x6jVVD-OSM-2026-178MAL-2026-2086
References
Malicious crates package: finch-rust
advisory
Malicious crates package: sha-rust
advisory
Browse GCVE Records
72,148 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.