https://tsd.reportSecurity engineering, without the noise.https://github.com/GeoNode/geonode/security/advisories/GHSA-9fpx-fr6j-2vh6https://tsd.report/article/geonode-vector-layer-command-injection-2026GeoNode’s maintainer reports command execution through crafted vector-upload layer names. Its advisory lists versions through 5.0.1 as affected. GitHub’s reviewed database lists 5.1.0 as fixed, while the maintainer’s patched-version field remains unset.https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97https://tsd.report/article/kaniko-azure-registry-token-leak-2026The Chainguard kaniko fork’s advisory describes Azure access-token exposure when untrusted Dockerfiles or build arguments reference lookalike registry hosts and an Azure identity is available. Its bundled credential helper can send a token to an attacker-controlled registry.https://opsshield.com/notice/security-incident-disclosure-servermanage.htmlhttps://tsd.report/article/cpguard-update-channel-compromise-2026OPSSHIELD says attackers used its cPGuard update channel to send a malicious update on November 2. Its later disclosure describes roughly 70 minutes of malicious distribution and exposure of root-level secrets, superseding the vendor’s earlier account.https://gist.github.com/MotherSphere/d6c049a09ba8ac3085c51ee9df24a4e5https://tsd.report/article/nikke-pc-launcher-cdn-compromise-2026MotherSphere’s NIKKE investigation describes tampered scripts on Level Infinite’s CDN loading a remote-control agent. Follow-up reporting describes credential-stealing capabilities and warns that updated launcher cleanup can erase evidence of an earlier infection.https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9https://tsd.report/article/rails-active-storage-imagemagick-file-access-2026Rails’ November 4 advisory describes arbitrary file writes during attachment analysis when Active Storage uses ImageMagick, accepts untrusted uploads, and lacks a restrictive coder policy. Disk-backed storage can also expose files readable by the app.https://socket.dev/blog/shai-hulud-descendant-malicious-ruby-gemhttps://tsd.report/article/strutil-core-rubygems-malwareSocket’s November 6 analysis links strutil-core 1.0.1, published November 1, to an install-time credential stealer and AI tool persistence. It was a standalone malicious gem; victims and successful downstream infections remain unconfirmed.https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/98xxx/CVE-2026-98432.jsonhttps://tsd.report/article/linux-ipv4-tcp-use-after-freeCVE-2026-98432 affects Linux IPv4 TCP connection handling. Aikido reports a demonstrated remote-root exploit against an MPTCP listener; that condition should guide urgent exposure checks without being treated as the full boundary of the flaw.https://tsd.report/article/emudhra-weak-intermediate-ca-keys-2026https://tsd.report/article/emudhra-weak-intermediate-ca-keys-2026Cloudflare now reports certificates apparently forged with eMudhra’s weak intermediate keys and about 22,000 attempted handshakes in its telemetry. It has not seen interception of its own connections. Its challenge probes suggest some embedded browsers still accept affected chains, with a skewed traffic sample.https://www.microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor/https://tsd.report/article/cursor-claude-code-extension-marketplace-compromise-2026Cursor reported that tampered Claude Code extension builds were served from its marketplace on October 29. Microsoft found an injected loader that attempted SSH access and persistence. The evidence is specific to Cursor distribution; successful remote access depends on host conditions.https://tsd.report/article/litellm-october-2026-release-compromisehttps://tsd.report/article/litellm-october-2026-release-compromiseLiteLLM’s investigation connects an October 10 secret-stealing workflow to the October 21 publication of compromised litellm==1.107.0 artifacts. Socket independently found traces of the earlier workflow. The maintainer says token hashes link a stolen maintainer credential to approval of the later release.https://tsd.report/article/ghostaction-october-2026-workflow-injectionhttps://tsd.report/article/ghostaction-october-2026-workflow-injectionSocket’s October investigation found malicious GitHub Actions workflows added through compromised maintainer accounts. Its initial case study covered 346 repositories; a later update identified a wider set of accounts and repositories. The workflow sought both CI secrets and credentials exposed in source or git history.https://tsd.report/article/memtensor-npm-pypi-package-compromise-2026https://tsd.report/article/memtensor-npm-pypi-package-compromise-2026Socket’s package analysis identifies malicious releases in both the MemTensor npm plugin and the MemoryOS package on PyPI. The packages included a Go binary that searched developer environments for secrets. This is one distribution compromise spanning two registries, not two unrelated stories.https://tsd.report/article/php2shell-php-engine-rce-2026https://tsd.report/article/php2shell-php-engine-rce-2026The PHP project released security updates for two engine flaws tracked as CVE-2026-109618 and CVE-2026-109619. Under the conditions described by the PHP Foundation, an unauthenticated request can reach code execution. This is a major runtime vulnerability, not a compromise of PHP packages or its release process.https://tsd.report/article/node2shell-brotli-decoder-rce-2026https://tsd.report/article/node2shell-brotli-decoder-rce-2026The Node.js project rates CVE-2026-111497 high severity. Malformed Brotli data can drive an out-of-bounds write when an application decompresses attacker-supplied input through node:zlib. The affected supported release lines are 22.x, 24.x and 26.x. This is a runtime vulnerability, not evidence that Node.js distribution was compromised.