MAL-2025-170460 Malicious code in verify-tactiva-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4c3fcc9b033d8f61a8314ab4f9fe3d72f70335aaaf168b93c68620b5f95fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170362 Malicious code in verify-ayali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190202e5a8876dcbd5ea83677133cdc6af1efd3535a047966f6ee00be6bd5868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170472 Malicious code in verify-taic-alusakiliabamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def577300a720458180524a1120162e41fd664809c46770d4711bdfa6ca49ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170283 Malicious code in verify-aikun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a268e360cbd2d875bc227f43b18896d40d6fabe83f2e418b7086f6fcc332967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170491 Malicious code in verify-tayic-aibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca3c14d7d5d8787e5b0c3801e2348b95b4c3662ca9b35148f3527e54e653d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170316 Malicious code in verify-ain-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170437 Malicious code in verify-tac-malasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e8d5a87ba7adafdd15a2f5abf2c38e8d385bef18decf14c2a3fcda7fef759e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170379 Malicious code in verify-ayic-amha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f1ea9b40254b27f64c51856349fcbc3a9c8823c70d3c05ab847ab37fb6aecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170415 Malicious code in verify-ayisali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153bf4eadd8b505e7149149c00446b7bf168f8fecfdb23fef449dc47b1e15a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170529 Malicious code in verify-ticul-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c6ad69c040a0b376fbdbcbfebaed3c824a727f1550c4eb045ba9966ac4b11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

UBUNTU-CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

Linux Distros Unpatched Vulnerability : CVE-2025-40129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero- length checksum.len causes checksum.data to be set to NULL. Thi...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...