LOW

DSA-6386-1 opam - security update

Debian Security • Jul 10, 2026

INFO

RHSA-2026:27732: Moderate: yggdrasil-worker-package-manager security update

Red Hat Errata • Jun 22, 2026

MEDIUM

RHSA-2026:25999: Moderate: yggdrasil-worker-package-manager security update

Red Hat Errata • Jun 15, 2026

MEDIUM

GitHub to Update npm to Thwart Software Supply Chain Attacks

Infosecurity Magazine • Jun 12, 2026

MEDIUM

CVE-2026-48864 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Microsoft Security Response Center • May 31, 2026

INFO

pnpm 11 Might Finally Be a Better Default Than npm

Reddit r/netsec • May 22, 2026

INFO

RHSA-2026:19141: Important: PackageKit security update

Red Hat Errata • May 19, 2026

INFO

RHSA-2026:19128: Important: yggdrasil-worker-package-manager security update

Red Hat Errata • May 19, 2026

LOW

OpenWrt 25.12.0 ships with new package manager, built-in upgrade tool, support for 2200+ devices

Help Net Security • Mar 09, 2026

INFO

Snyk and uv, Better Together

Snyk • Feb 24, 2026