PT-2025-46240

Name of the Vulnerable Software and Affected Versions SAP CommonCryptoLib affected versions not specified Description SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This can lead to memory corruption and...

MAL-2025-57797 Malicious code in necessary_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2af84618efa5ccc22dad9037732e4b853516157ce2a1477e554e30acb5bc762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54870 Malicious code in sinta-lupis56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e56239a379c39078e5d3fb0de06f8cac95b2126e5434bf7f73fa75085eebc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jus39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae25e5a9258fd0c80bed5883f3bbba3f6747826bb7c46b3a85130827526458 The package bambang-jus39-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

[SECURITY] Fedora 43 Update: python-jiter-0.11.1-1.fc43

Fast iterable JSON parser...

GHSA-4766-X535-JW3R kgateway is missing xDS authorization

Summary The xDS interface in Kgateway versions 2.0.0 through 2.0.4 lacks authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend service information, routing rules, and cluster...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, runc, iptables-wrappers, speedtest-go, opentofu, terraform-provider-sendgrid,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: petname, neuvector-dbgen, maru, pulumi-kubernetes-operator, trivy-operator, stakater-reloader, crane, cfssl, infinispan-operator, gostatsd, manifest-tool, aws-sigv4-proxy, metacontroller, gosu, runc, iptables-wrappers, speedtest-go, opentofu,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: fixuid, dfc, gotestsum, falcosidekick-fips, openbao-k8s, sonobuoy-fips, sonobuoy, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, cluster-api, kafka-proxy, kubeflow, cluster-proportional-autoscaler-fips, prometheus-elasticsearch-exporter,...