3375 matches found
EUVD-2025-206486
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...
CVE-2025-61140
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...
CVE-2025-61140
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...
CVE-2025-57283: Improper Control of Generation of Code
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...
CVE-2025-57283
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...
CVE-2026-24803
CVE-2026-24803 describes an infinite loop (unreachable exit condition) vulnerability in coolsnowwolf/lede within the MT7615D wifi drivers under mt_wifi/embedded/security modules, specifically associated with bn_lib.C. Affected software: LEDE project releases up to and including r25.10.1. Root cau...
CVE-2026-23002
In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...
CVE-2026-23002: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...
golang security update
1.25.5-1 - Update to Go 1.25.5 fips-1 1.25.3-5 - gating.yaml: Add tier1 s390x tests 1.25.3-4 - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes gojswasmexec availability 1.25.3-3 - plans/tier0.fmf...
MAL-2026-344 Malicious code in ofjaaah-security-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bfbd5c89af01468786a4ff45da3126dbd49e28e4a250d0d124fc65b1f0c508 The package ofjaaah-security-lib was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview private-payment-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in private-payment-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c4346497d58e1d5eca5c47353d4491578827b6095eb0f62dc7ff4449c0758b The package private-payment-lib was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview auc-2-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview zis-common-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in auc-2-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...
Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...
EUVD-2026-3048
Malicious code in zis-common-lib npm...
MAL-2026-269 Malicious code in auc-2-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...
MAL-2026-320 Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...