2885 matches found
MAL-2025-45063 Malicious code in loop-yakutsk-eslint-async (npm)
The package loop-yakutsk-eslint-async was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2021-22132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store t...
Linux Distros Unpatched Vulnerability : CVE-2025-38534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs...
Linux Distros Unpatched Vulnerability : CVE-2021-28690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see...
DEBIAN-CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
AZL-73914 CVE-2024-58240 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
UBUNTU-CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
CVE-2024-58240 tls: separate no-async decryption request handling from async
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
CVE-2024-58240
The CVE-2024-58240 entry concerns the Linux kernel TLS path, specifically separating no-async decryption request handling from async flow. The described issue centers on a race in the TLS decryption handling (no-async vs async) and notes that a prior patch (aec7961916f3) addressed a UAF risk rela...
CVE-2024-58240 tls: separate no-async decryption request handling from async
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
Linux Distros Unpatched Vulnerability : CVE-2023-46445
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a Rogue Extension...
a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2618 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)
async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...
RUSTSEC-2025-0052 async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...
async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...
PT-2025-36674
The async-std has been discontinued. Alternatives: - smol...
UBUNTU-CVE-2025-38628
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in mlx5vdpadevadd, even in the cleanup...
PT-2026-24113
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.15.1 vLLM version 0.17.0 Description vLLM is an inference and serving engine for large language models LLMs. A Server-Side Request Forgery SSRF protection mechanism implemented in version 0.15.1 can be bypassed in the...
Linux Distros Unpatched Vulnerability : CVE-2023-52459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call dropped here is alrea...
Linux Distros Unpatched Vulnerability : CVE-2023-48184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QuickJS before 7414e5f has a quickjs.h JSFreeValueRT use-after-free because of incorrect garbage collection of async functions with closures. CVE-2023-48184 Not...
Linux Distros Unpatched Vulnerability : CVE-2025-38358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and closectree Syzbot reported an assertion...