CVE-2025-36854: Use After Free

A vulnerability CVE-2024-38229 https://www.cve.org/CVERecord exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free...

sctp: linearize cloned gso packets in sctp_rcv

...

CVE-2025-57807

CVE-2025-57807 affects ImageMagick versions lower than 14.8.2. The vulnerability arises from insecure functions SeekBlob() and WriteBlob(): SeekBlob() allows advancing the stream offset beyond the current end without increasing capacity, and WriteBlob() expands by quantum + length instead of offs...

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

Malicious code in xo-fornax-blitz-stream (npm)

The package xo-fornax-blitz-stream was found to contain malicious code...

Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

MAL-2025-44050 Malicious code in dotenv-jasmine-cosmicweb-stream (npm)

The package dotenv-jasmine-cosmicweb-stream was found to contain malicious code...

Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...

MAL-2025-44771 Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

MAL-2025-46738 Malicious code in xo-fornax-blitz-stream (npm)

The package xo-fornax-blitz-stream was found to contain malicious code...

Malicious code in ganymede-stream-nuxtjs-ursa (npm)

The package ganymede-stream-nuxtjs-ursa was found to contain malicious code...

MAL-2025-44375 Malicious code in ganymede-stream-nuxtjs-ursa (npm)

The package ganymede-stream-nuxtjs-ursa was found to contain malicious code...

MAL-2025-46256 Malicious code in terser-webpack-plugin-socketio-vuetify-stream (npm)

The package terser-webpack-plugin-socketio-vuetify-stream was found to contain malicious code...

MAL-2025-43452 Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

MAL-2025-45065 Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...

MAL-2025-44290 Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

OESA-2025-2188 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2187 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...