VDB

GCVE-VVD-OSM-2026-210

GCVE-VVD-OSM-2026-210
Advisory PublishedCVSS 9.6/10
Vulnetix · Advisory published March 16, 2026
Malicious package detected. Behaviors: code execution, obfuscated code. Payload: kvstore_pb2_grpc/__init__.py Key findings: - Shell Command Execution in kvstore_pb2_grpc/__init__.py: "subprocess.Popen(" - Silent Process Execution in kvstore_pb2_grpc/__init__.py: "stdout=subprocess.DEVNULL" IOCs: - ipv4: 8.8.8.8 - domains: LogLevel.INFO, MANIFEST.in - bitcoinAddresses: 16crw64vg86mExNn2wmGM7Xr4iALo9f46, 17zHCsiaSkt2Exf47aiUC28G5vaykA9nm, 1XK1vazF58fRAEggWPyTXJgRcWUZKUzo, 1SAgGxvJux4cHkCoSfwgWcjard5iNfjv, 3gyuyfwhy4n5iFzfoyczwvwrqFvaygw9X2 (+2 more) - payloadFileHash: d76959ad0e4a5abe9b90a6a714420e2c56cd992124f2be052c7da24248e05d1f
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownOCI.DotNetSDK.Waf.Netall (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—
unknownOCI.DotNetSDK.Threat.intelligenceall (affected)—
unknownkvstore-pb2-grpcall (affected)—
unknownOCI.DotNetSDK.Servicemanager.proxyall (affected), all (affected), all (affected), all (affected), all (affected), all (affected)—

Aliases

MAL-2026-1433

Transitive aliases

VVD-OSM-2026-80GHSA-r6f4-p397-5xrjMAL-2026-1561MAL-2026-2085VVD-OSM-2026-5GHSA-cqxq-2582-f357MAL-2026-1990VVD-OSM-2026-188VVD-OSM-2026-102VVD-OSM-2026-239GHSA-2rjv-fxjc-xwmvMAL-2026-2125MAL-2026-1932MAL-2026-1099VVD-OSM-2026-587MAL-2026-2133MAL-2026-1284MAL-2026-2073GHSA-8f57-hh49-gmqfMAL-2026-2103MAL-2026-2243MAL-2026-2163MAL-2026-1341VVD-OSM-2026-232VVD-OSM-2026-259GHSA-xpmv-42gw-w7wcVVD-OSM-2026-720VVD-OSM-2026-240VVD-OSM-2026-133MAL-2026-2101VVD-OSM-2026-24VVD-OSM-2026-628VVD-OSM-2026-132VVD-OSM-2026-695MAL-2026-2222VVD-OSM-2026-104VVD-OSM-2026-103VVD-OSM-2026-7MAL-2026-1407MAL-2026-2081VVD-OSM-2026-550MAL-2026-2234VVD-OSM-2026-677VVD-OSM-2026-153VVD-OSM-2026-589GHSA-jcwx-28x8-jf6fVVD-OSM-2026-654GHSA-xqxf-c9jr-8wx6GHSA-2273-pvh3-9x6jMAL-2026-1974MAL-2026-2193VVD-OSM-2026-204MAL-2026-2154VVD-OSM-2026-582GHSA-f6pq-884h-rjxqMAL-2026-2245MAL-2026-2136MAL-2026-1084MAL-2026-1488MAL-2026-2098MAL-2026-1544GHSA-7hf8-rm28-2rm8VVD-OSM-2026-709VVD-OSM-2026-681VVD-OSM-2026-17VVD-OSM-2026-81MAL-2026-1562MAL-2026-1436MAL-2026-1996VVD-OSM-2026-31VVD-OSM-2026-109VVD-OSM-2026-643GHSA-f582-qpjg-gx9hVVD-OSM-2026-14MAL-2026-2239VVD-OSM-2026-89VVD-OSM-2026-535VVD-OSM-2026-672VVD-OSM-2026-701VVD-OSM-2026-179VVD-OSM-2026-729GHSA-9674-vwjj-qxjpMAL-2026-1965VVD-OSM-2026-592MAL-2026-2169MAL-2026-2096VVD-OSM-2026-574VVD-OSM-2026-725GHSA-fm43-2f72-p329VVD-OSM-2026-568MAL-2026-2221MAL-2026-1977GHSA-5g2c-h3r8-6w3gMAL-2026-2088GHSA-q93m-663h-q987VVD-OSM-2026-596GHSA-347h-frw7-j9f5VVD-OSM-2026-271VVD-OSM-2026-224MAL-2026-2189GHSA-69cx-hr8r-mc9jVVD-OSM-2026-143MAL-2026-2093MAL-2026-1340MAL-2026-2062VVD-OSM-2026-572MAL-2026-2165VVD-OSM-2026-18VVD-OSM-2026-77MAL-2026-2174VVD-OSM-2026-150MAL-2026-2181MAL-2026-1285VVD-OSM-2026-101MAL-2026-1975VVD-OSM-2026-656GHSA-wv5m-jqq3-c22xVVD-OSM-2026-546GHSA-pjxj-7mxh-9348GHSA-hqj8-x2vp-mrp9MAL-2026-2198GHSA-xq57-xcgm-9q8qVVD-OSM-2026-83VVD-OSM-2026-221MAL-2026-1971MAL-2026-1945VVD-OSM-2026-56MAL-2026-1927VVD-OSM-2026-566MAL-2026-1138VVD-OSM-2026-689MAL-2026-1926VVD-OSM-2026-107VVD-OSM-2026-607VVD-OSM-2026-151VVD-OSM-2026-88MAL-2026-1572GHSA-6mrh-fqgr-9x68MAL-2026-2097MAL-2026-2223VVD-OSM-2026-251GHSA-36wg-c889-h26jVVD-OSM-2026-569GHSA-xmfj-5j3f-gx7xMAL-2026-2204VVD-OSM-2026-166MAL-2026-1579VVD-OSM-2026-41GHSA-7xpm-vmrr-4rrvGHSA-h29v-mffh-vf54GHSA-76ph-2x99-486xMAL-2026-1968VVD-OSM-2026-576GHSA-3qf5-vfww-7p7gMAL-2026-1091GHSA-5g7h-cvvx-x96cVVD-OSM-2026-93GHSA-6w26-75vp-gf97VVD-OSM-2026-87MAL-2026-1141VVD-OSM-2026-683VVD-OSM-2026-548VVD-OSM-2026-578VVD-OSM-2026-190MAL-2026-2185GHSA-qw8c-w97q-7p7pVVD-OSM-2026-215MAL-2026-2092VVD-OSM-2026-226VVD-OSM-2026-4MAL-2026-2130VVD-OSM-2026-198MAL-2026-2007MAL-2026-2246VVD-OSM-2026-623VVD-OSM-2026-536MAL-2026-1496MAL-2026-2087GHSA-42g4-g458-9wx9VVD-OSM-2026-243MAL-2026-1973VVD-OSM-2026-674VVD-OSM-2026-553VVD-OSM-2026-703VVD-OSM-2026-640MAL-2026-1940VVD-OSM-2026-533VVD-OSM-2026-603GHSA-8w5j-p4jv-8rmqMAL-2026-1097MAL-2026-1241VVD-OSM-2026-262GHSA-f8qc-h6gw-x2vmVVD-OSM-2026-174GHSA-9xfj-83q4-hxj6VVD-OSM-2026-613VVD-OSM-2026-58GHSA-q46m-r8wj-v4p9MAL-2026-1290MAL-2026-1294MAL-2026-1140MAL-2026-1223VVD-OSM-2026-1VVD-OSM-2026-223MAL-2026-2166MAL-2026-2160VVD-OSM-2026-577VVD-OSM-2026-194MAL-2026-1378GHSA-hqvw-49vr-fpw3GHSA-hfhc-gmgj-9v7vGHSA-69jj-c93h-67p2VVD-OSM-2026-696VVD-OSM-2026-615MAL-2026-2207VVD-OSM-2026-170GHSA-87mp-vrm9-h8r5MAL-2026-2099VVD-OSM-2026-270MAL-2026-2048GHSA-mrwh-gr28-36wvMAL-2026-1935VVD-OSM-2026-130MAL-2026-2197VVD-OSM-2026-162MAL-2026-1966MAL-2026-2040MAL-2026-1564VVD-OSM-2026-120MAL-2026-2159MAL-2026-2006MAL-2026-1567GHSA-25q2-f9vw-3hf3VVD-OSM-2026-90VVD-OSM-2026-661MAL-2026-1098GHSA-vpx7-g2h6-rq6cMAL-2026-2156VVD-OSM-2026-44MAL-2026-1954MAL-2026-2194MAL-2026-2216VVD-OSM-2026-247GHSA-gphq-fq72-qxwrMAL-2026-2128VVD-OSM-2026-124VVD-OSM-2026-598MAL-2026-1350VVD-OSM-2026-726MAL-2026-2129MAL-2026-2110VVD-OSM-2026-38VVD-OSM-2026-206VVD-OSM-2026-99VVD-OSM-2026-237GHSA-c39r-4xjc-wrcvVVD-OSM-2026-712MAL-2026-1029VVD-OSM-2026-570MAL-2026-1578GHSA-gfm3-3p4f-m57wVVD-OSM-2026-538VVD-OSM-2026-211VVD-OSM-2026-609VVD-OSM-2026-257MAL-2026-2191MAL-2026-1064VVD-OSM-2026-669VVD-OSM-2026-33VVD-OSM-2026-66GHSA-vf6p-p33f-3cjvMAL-2026-1085MAL-2026-2218GHSA-53rc-g3gw-946rVVD-OSM-2026-126VVD-OSM-2026-595VVD-OSM-2026-155GHSA-7qv7-jx74-qhx9VVD-OSM-2026-177MAL-2026-1557VVD-OSM-2026-197VVD-OSM-2026-559VVD-OSM-2026-645MAL-2026-1952VVD-OSM-2026-175VVD-OSM-2026-724VVD-OSM-2026-588MAL-2026-2188MAL-2026-2010VVD-OSM-2026-8MAL-2026-2055VVD-OSM-2026-634MAL-2026-1080VVD-OSM-2026-242GHSA-2phg-9x97-9759MAL-2026-1959VVD-OSM-2026-160VVD-OSM-2026-660VVD-OSM-2026-563VVD-OSM-2026-172VVD-OSM-2026-64VVD-OSM-2026-692VVD-OSM-2026-230VVD-OSM-2026-84VVD-OSM-2026-601MAL-2026-1342MAL-2026-2105MAL-2026-2164VVD-OSM-2026-136VVD-OSM-2026-15MAL-2026-1523MAL-2026-1947MAL-2026-1998MAL-2026-1581VVD-OSM-2026-651MAL-2026-1969MAL-2026-1988GHSA-6jcw-rcqg-wmmfVVD-OSM-2026-567VVD-OSM-2026-622VVD-OSM-2026-51VVD-OSM-2026-212VVD-OSM-2026-565MAL-2026-1956MAL-2026-1575MAL-2026-2219VVD-OSM-2026-72VVD-OSM-2026-244VVD-OSM-2026-688GHSA-fp44-gpc5-cc43VVD-OSM-2026-78MAL-2026-1224VVD-OSM-2026-145VVD-OSM-2026-233MAL-2026-2077VVD-OSM-2026-629VVD-OSM-2026-714VVD-OSM-2026-583GHSA-p5gg-75q6-vp64VVD-OSM-2026-682GHSA-p885-4m86-h35rMAL-2026-1995MAL-2026-1964VVD-OSM-2026-730MAL-2026-2053VVD-OSM-2026-555VVD-OSM-2026-637VVD-OSM-2026-254VVD-OSM-2026-196VVD-OSM-2026-34MAL-2026-1569GHSA-fgvm-3g6v-ppjfGHSA-7v3c-wxfg-x5fgVVD-OSM-2026-665VVD-OSM-2026-608VVD-OSM-2026-161VVD-OSM-2026-122VVD-OSM-2026-218GHSA-c5x7-f6qj-gc77VVD-OSM-2026-636GHSA-4g9r-2x44-gfm4GHSA-6rj6-xwm6-v698VVD-OSM-2026-248GHSA-f6jh-hc8p-xpfxMAL-2026-1979MAL-2026-1986VVD-OSM-2026-181VVD-OSM-2026-96VVD-OSM-2026-547MAL-2026-2168VVD-OSM-2026-207GHSA-w977-mj56-jpc7VVD-OSM-2026-624VVD-OSM-2026-111MAL-2026-1088VVD-OSM-2026-176VVD-OSM-2026-632VVD-OSM-2026-137GHSA-2prc-m9c3-jgwpVVD-OSM-2026-73VVD-OSM-2026-227VVD-OSM-2026-65MAL-2026-2000VVD-OSM-2026-644MAL-2026-1538MAL-2026-2167MAL-2026-1431MAL-2026-1957VVD-OSM-2026-23VVD-OSM-2026-20MAL-2026-2134VVD-OSM-2026-594MAL-2026-2082VVD-OSM-2026-157VVD-OSM-2026-139GHSA-8g7v-w2f5-7gw2GHSA-r8j3-m86x-q66xVVD-OSM-2026-633GHSA-fppj-8rcf-8fppVVD-OSM-2026-706GHSA-p7pv-mfpq-4rfgGHSA-jrpm-f5xg-3frjMAL-2026-2236MAL-2026-2153MAL-2026-1289GHSA-jfqc-55rq-mm3jVVD-OSM-2026-705VVD-OSM-2026-59GHSA-9mp5-2jp4-wmwwGHSA-wwjg-c6fp-6648VVD-OSM-2026-702VVD-OSM-2026-647VVD-OSM-2026-128VVD-OSM-2026-129GHSA-hmv2-22ff-cxh8MAL-2026-2094MAL-2026-2005VVD-OSM-2026-82GHSA-3qmv-2h4m-5qg9GHSA-7w6q-gfxv-393vVVD-OSM-2026-186VVD-OSM-2026-727VVD-OSM-2026-586GHSA-7qgj-3cfq-g4g4VVD-OSM-2026-652VVD-OSM-2026-180MAL-2026-2162VVD-OSM-2026-25VVD-OSM-2026-192MAL-2026-2226MAL-2026-1409VVD-OSM-2026-105GHSA-gmvg-736c-7g9fVVD-OSM-2026-653MAL-2026-1278VVD-OSM-2026-540VVD-OSM-2026-723GHSA-jq28-7779-5hp9MAL-2026-1563VVD-OSM-2026-47GHSA-wp6r-9m2x-4h55VVD-OSM-2026-261MAL-2026-2248MAL-2026-1434VVD-OSM-2026-163MAL-2026-2186VVD-OSM-2026-3MAL-2026-1937VVD-OSM-2026-40VVD-OSM-2026-593GHSA-3j5q-xvjq-rqxqMAL-2026-1035VVD-OSM-2026-146GHSA-x6m2-63j5-v6c7MAL-2026-1941GHSA-m6hv-9gh4-4c85MAL-2026-2132MAL-2026-1958VVD-OSM-2026-214VVD-OSM-2026-22GHSA-9php-8vxv-7gmxVVD-OSM-2026-641VVD-OSM-2026-269VVD-OSM-2026-169VVD-OSM-2026-573GHSA-7fr9-gw6v-q3mwGHSA-7x8p-2g3v-pwqpVVD-OSM-2026-235GHSA-7fpm-p46r-h37gGHSA-24fv-r862-wg4cMAL-2026-1962VVD-OSM-2026-76VVD-OSM-2026-700VVD-OSM-2026-158MAL-2026-1143VVD-OSM-2026-63MAL-2026-1583GHSA-3hr5-9jhx-97c5VVD-OSM-2026-108VVD-OSM-2026-611MAL-2026-1235VVD-OSM-2026-165VVD-OSM-2026-679GHSA-mwq7-2fm8-vc4qVVD-OSM-2026-710MAL-2026-2002GHSA-86xp-4fvm-qm2pVVD-OSM-2026-534MAL-2026-1480GHSA-6w74-x38v-9ffjGHSA-8328-7r2v-2fq6GHSA-gv85-mrvr-pgchVVD-OSM-2026-121MAL-2026-1089MAL-2026-1517GHSA-x24f-q36q-6pcjVVD-OSM-2026-116VVD-OSM-2026-201VVD-OSM-2026-231VVD-OSM-2026-185VVD-OSM-2026-704MAL-2026-1275MAL-2026-2063VVD-OSM-2026-183MAL-2026-1976MAL-2026-1955GHSA-r934-qgg3-v7fgVVD-OSM-2026-691VVD-OSM-2026-690VVD-OSM-2026-154VVD-OSM-2026-638GHSA-wcrr-xhm3-j3x9MAL-2026-1570VVD-OSM-2026-57GHSA-f46r-3xg5-w2wmMAL-2026-1543VVD-OSM-2026-167MAL-2026-1222VVD-OSM-2026-134VVD-OSM-2026-123MAL-2026-1992VVD-OSM-2026-658VVD-OSM-2026-610VVD-OSM-2026-649VVD-OSM-2026-184VVD-OSM-2026-39VVD-OSM-2026-585GHSA-px82-m72x-rpj7GHSA-7r3j-rgcw-3jgqVVD-OSM-2026-639GHSA-3fjh-jjvh-r58hMAL-2026-1371VVD-OSM-2026-663VVD-OSM-2026-168VVD-OSM-2026-147VVD-OSM-2026-68VVD-OSM-2026-642VVD-OSM-2026-238VVD-OSM-2026-539VVD-OSM-2026-29MAL-2026-1411MAL-2026-1925MAL-2026-1942VVD-OSM-2026-256VVD-OSM-2026-225GHSA-fr84-v3mx-mr9xVVD-OSM-2026-697MAL-2026-2032GHSA-6jrx-v84r-9g5mVVD-OSM-2026-713VVD-OSM-2026-604MAL-2026-1351MAL-2026-2090VVD-OSM-2026-182VVD-OSM-2026-699MAL-2026-2206VVD-OSM-2026-253MAL-2026-1498GHSA-ppr8-pvc2-8f99VVD-OSM-2026-561VVD-OSM-2026-220MAL-2026-1580VVD-OSM-2026-557VVD-OSM-2026-260VVD-OSM-2026-92GHSA-82fx-cjgq-fc8vVVD-OSM-2026-605VVD-OSM-2026-662VVD-OSM-2026-686VVD-OSM-2026-236VVD-OSM-2026-635VVD-OSM-2026-252MAL-2026-1987VVD-OSM-2026-667GHSA-x49c-wrwr-8p2qMAL-2026-2127GHSA-r54j-4cj8-jf2vMAL-2026-1283MAL-2026-1226VVD-OSM-2026-195VVD-OSM-2026-156VVD-OSM-2026-98MAL-2026-2187MAL-2026-2018VVD-OSM-2026-43GHSA-rjc8-xw63-3j4jGHSA-5w92-jfv8-ppvxMAL-2026-1225VVD-OSM-2026-684GHSA-x8xx-3mj7-337xMAL-2026-2064MAL-2026-2235VVD-OSM-2026-53MAL-2026-1482VVD-OSM-2026-673VVD-OSM-2026-12GHSA-4h33-vfc6-f2hhVVD-OSM-2026-67MAL-2026-2075MAL-2026-1530VVD-OSM-2026-545GHSA-qxf6-x9c5-qxr4VVD-OSM-2026-35VVD-OSM-2026-659VVD-OSM-2026-16VVD-OSM-2026-626MAL-2026-2179MAL-2026-1263MAL-2026-1558GHSA-64p5-3wp7-v4c9VVD-OSM-2026-140GHSA-3m3c-wc3h-m5mrVVD-OSM-2026-138VVD-OSM-2026-37VVD-OSM-2026-49MAL-2026-2079VVD-OSM-2026-721GHSA-38c4-cmg5-vpvcGHSA-jvrr-w8mr-28hpGHSA-mvrx-3fqg-4hvhMAL-2026-2086MAL-2026-1279VVD-OSM-2026-86VVD-OSM-2026-648MAL-2026-1276GHSA-39vv-2g62-pp83MAL-2026-1938GHSA-8vmq-w85q-4q4jVVD-OSM-2026-142MAL-2026-2011MAL-2026-2037VVD-OSM-2026-171MAL-2026-1527VVD-OSM-2026-266MAL-2026-2240GHSA-8cpf-9rj8-q68mVVD-OSM-2026-95MAL-2026-2244MAL-2026-1946MAL-2026-2157MAL-2026-1406VVD-OSM-2026-599MAL-2026-1960VVD-OSM-2026-71VVD-OSM-2026-228VVD-OSM-2026-675VVD-OSM-2026-119VVD-OSM-2026-694MAL-2026-1018MAL-2026-1997MAL-2026-1565GHSA-r6qh-rm6v-7pvxVVD-OSM-2026-549VVD-OSM-2026-671MAL-2026-1982VVD-OSM-2026-61VVD-OSM-2026-571GHSA-vvwp-x2vx-wxpfGHSA-q4j2-j63f-5vqxMAL-2026-2155VVD-OSM-2026-28GHSA-9wmg-m3mr-xx93VVD-OSM-2026-245VVD-OSM-2026-191VVD-OSM-2026-219VVD-OSM-2026-19GHSA-4p9p-g69r-jxv8VVD-OSM-2026-625MAL-2026-2247MAL-2026-1573VVD-OSM-2026-263VVD-OSM-2026-711GHSA-74r2-ggvc-h778MAL-2026-2228MAL-2026-1978MAL-2026-2089MAL-2026-2076MAL-2026-2238VVD-OSM-2026-717MAL-2026-2061GHSA-5q3v-cjxm-6cgmGHSA-p2f8-jq4c-jj37MAL-2026-2015GHSA-4gc2-gg24-6qf6MAL-2026-1139VVD-OSM-2026-118GHSA-767f-p685-mw32GHSA-vrqq-pxvj-f2mgMAL-2026-2019MAL-2026-1262GHSA-hpqp-f9r8-f725VVD-OSM-2026-2VVD-OSM-2026-69VVD-OSM-2026-234MAL-2026-2220VVD-OSM-2026-36VVD-OSM-2026-678GHSA-j4p4-x5rc-96xxGHSA-mg5x-ww4x-j322MAL-2026-1981VVD-OSM-2026-205MAL-2026-2080VVD-OSM-2026-6VVD-OSM-2026-135VVD-OSM-2026-32VVD-OSM-2026-544GHSA-8m7g-rpw2-w26vGHSA-58m2-f8rc-wwq2MAL-2026-1019VVD-OSM-2026-268MAL-2026-1044VVD-OSM-2026-100MAL-2026-2178VVD-OSM-2026-715MAL-2026-1339MAL-2026-2192VVD-OSM-2026-203VVD-OSM-2026-45VVD-OSM-2026-60GHSA-cp44-cvhx-wf33GHSA-p4gv-m838-2xq9MAL-2026-1291VVD-OSM-2026-110VVD-OSM-2026-152MAL-2026-1281VVD-OSM-2026-685VVD-OSM-2026-199VVD-OSM-2026-250GHSA-pjmv-p8w4-fjq5MAL-2026-2135MAL-2026-2123MAL-2026-1950GHSA-f8cx-966c-8x2hMAL-2026-1090MAL-2026-1970GHSA-rm67-f2rf-9fwfMAL-2026-1943MAL-2026-2241MAL-2026-1963VVD-OSM-2026-718GHSA-6vcv-6xjg-jm7wMAL-2026-2095MAL-2026-1972MAL-2026-1521VVD-OSM-2026-581VVD-OSM-2026-222VVD-OSM-2026-173GHSA-h95x-pph2-h496GHSA-gmxq-2g92-63xvMAL-2026-1086VVD-OSM-2026-618MAL-2026-1261VVD-OSM-2026-732VVD-OSM-2026-554MAL-2026-1438VVD-OSM-2026-590MAL-2026-1584VVD-OSM-2026-79VVD-OSM-2026-249VVD-OSM-2026-670VVD-OSM-2026-229VVD-OSM-2026-178VVD-OSM-2026-591VVD-OSM-2026-580VVD-OSM-2026-55VVD-OSM-2026-600MAL-2026-2196VVD-OSM-2026-680VVD-OSM-2026-193VVD-OSM-2026-11MAL-2026-1410MAL-2026-1949MAL-2026-1574MAL-2026-1280VVD-OSM-2026-731VVD-OSM-2026-246MAL-2026-1412VVD-OSM-2026-62GHSA-fr9v-hm5m-rv52MAL-2026-1136VVD-OSM-2026-668MAL-2026-1582MAL-2026-1568MAL-2026-1560GHSA-f9m8-w27f-mxr3VVD-OSM-2026-115VVD-OSM-2026-149VVD-OSM-2026-687GHSA-j836-pcqv-w9c9MAL-2026-1437GHSA-x2c8-m9xp-3qmvMAL-2026-1325GHSA-m7hw-fgmf-jwhrGHSA-mqvj-42pf-qv58GHSA-r23r-8c7q-wm92MAL-2026-2229MAL-2026-2102MAL-2026-1277GHSA-95h8-q9jh-jjwfVVD-OSM-2026-30MAL-2026-2195MAL-2026-1287VVD-OSM-2026-543MAL-2026-1240VVD-OSM-2026-606VVD-OSM-2026-189VVD-OSM-2026-666GHSA-3qf9-476p-8j7fGHSA-c93f-8832-92qwVVD-OSM-2026-620MAL-2026-1951VVD-OSM-2026-602VVD-OSM-2026-646VVD-OSM-2026-556GHSA-9m98-jvf5-jxx5GHSA-hc54-whg7-r7g2MAL-2026-2003MAL-2026-2091GHSA-cv8h-5j9m-x3rcMAL-2026-1082GHSA-4wgw-h2cc-rpv6VVD-OSM-2026-97VVD-OSM-2026-216VVD-OSM-2026-564MAL-2026-1063GHSA-p427-hrfp-pc52VVD-OSM-2026-657GHSA-wgjr-2vhj-qwv7MAL-2026-1435VVD-OSM-2026-664MAL-2026-2111VVD-OSM-2026-21VVD-OSM-2026-698MAL-2026-1296MAL-2026-1980VVD-OSM-2026-144GHSA-2rj8-6crh-98qqMAL-2026-2242MAL-2026-2161MAL-2026-1931GHSA-cxvr-pcxc-6r58VVD-OSM-2026-655VVD-OSM-2026-558GHSA-g4q9-p378-mc3gVVD-OSM-2026-716MAL-2026-1577VVD-OSM-2026-541GHSA-82f5-93r9-hhwqVVD-OSM-2026-148GHSA-hqf3-9jfp-qgh9MAL-2026-1286VVD-OSM-2026-10VVD-OSM-2026-13VVD-OSM-2026-52GHSA-5w5v-cvxh-55vqMAL-2026-2200VVD-OSM-2026-159VVD-OSM-2026-542GHSA-j74c-w64f-9wg5VVD-OSM-2026-202MAL-2026-1983VVD-OSM-2026-614MAL-2026-1092MAL-2026-1985MAL-2026-2001GHSA-jhvp-qr9c-qg9pGHSA-52w3-g4x3-xw3hVVD-OSM-2026-141VVD-OSM-2026-131VVD-OSM-2026-728MAL-2026-1432GHSA-jffg-8cwf-786hMAL-2026-2009MAL-2026-1533VVD-OSM-2026-619VVD-OSM-2026-621MAL-2026-1142MAL-2026-1939MAL-2026-1499VVD-OSM-2026-537GHSA-5xq6-c5wc-f6x9MAL-2026-1295VVD-OSM-2026-627VVD-OSM-2026-575MAL-2026-1934VVD-OSM-2026-27VVD-OSM-2026-265MAL-2026-2233VVD-OSM-2026-117GHSA-9jg5-g7r5-p9f9GHSA-887f-wrq6-j685GHSA-34h2-gr5g-vc3jGHSA-44fq-5mh8-r5hgMAL-2026-1944VVD-OSM-2026-200VVD-OSM-2026-75VVD-OSM-2026-9VVD-OSM-2026-54VVD-OSM-2026-74VVD-OSM-2026-708VVD-OSM-2026-579MAL-2026-2100VVD-OSM-2026-187VVD-OSM-2026-258VVD-OSM-2026-113MAL-2026-1048VVD-OSM-2026-112VVD-OSM-2026-617MAL-2026-1288VVD-OSM-2026-693MAL-2026-1524MAL-2026-2047VVD-OSM-2026-70GHSA-r27q-f5jw-j5jpMAL-2026-1422VVD-OSM-2026-676VVD-OSM-2026-48GHSA-h2h6-q29m-3mm3VVD-OSM-2026-94VVD-OSM-2026-91MAL-2026-2074GHSA-4xcw-mhqm-x332VVD-OSM-2026-46VVD-OSM-2026-26MAL-2026-1049VVD-OSM-2026-631GHSA-pjwm-q9hh-23wjMAL-2026-1559VVD-OSM-2026-719MAL-2026-1479VVD-OSM-2026-272VVD-OSM-2026-213MAL-2026-2199VVD-OSM-2026-85MAL-2026-2203VVD-OSM-2026-241VVD-OSM-2026-722VVD-OSM-2026-125VVD-OSM-2026-114VVD-OSM-2026-209MAL-2026-2008VVD-OSM-2026-551VVD-OSM-2026-50VVD-OSM-2026-106VVD-OSM-2026-707GHSA-2gfq-7ff6-3mr7GHSA-52hw-wvx9-x8pqMAL-2026-2224MAL-2026-2225VVD-OSM-2026-255VVD-OSM-2026-42VVD-OSM-2026-560VVD-OSM-2026-267VVD-OSM-2026-164GHSA-28w8-cpp5-g448VVD-OSM-2026-127MAL-2026-2126MAL-2026-2131MAL-2026-1953GHSA-mgm3-4q53-38p5MAL-2026-1566GHSA-9cwp-m29q-hmgrVVD-OSM-2026-217MAL-2026-1961VVD-OSM-2026-264VVD-OSM-2026-562MAL-2026-2217MAL-2026-1948VVD-OSM-2026-597MAL-2026-2184VVD-OSM-2026-552VVD-OSM-2026-630GHSA-jmx7-4g26-qp86MAL-2026-2190VVD-OSM-2026-612VVD-OSM-2026-616MAL-2026-2176MAL-2026-2104VVD-OSM-2026-584VVD-OSM-2026-208GHSA-7g9x-834j-4788MAL-2026-2060MAL-2026-1529

References

Malicious nuget package: OCI.DotNetSDK.Waf.Net
advisory
vendor
Malicious nuget package: OCI.DotNetSDK.Servicemanager.proxy
advisory
vendor
Malicious nuget package: OCI.DotNetSDK.Threat.intelligence
advisory
vendor
Malicious pypi package: kvstore-pb2-grpc
advisory
advisory
vendor

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›