[SECURITY] Fedora 42 Update: rust-matchers-0.2.0-1.fc42

Regex matching on character and byte streams...

Fedora 42 : rust-matchers / rust-tracing-subscriber (2025-0ebd4408bd)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-0ebd4408bd advisory. - Update the tracing-subscriber crate to version 0.3.20. - Update the matchers crate to version 0.2.0. This update also includes a fix for CVE-2025-58160...

Fedora 41 : rust-matchers / rust-tracing-subscriber (2025-874b407d96)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-874b407d96 advisory. - Update the tracing-subscriber crate to version 0.3.20. - Update the matchers crate to version 0.2.0. This update also includes a fix for CVE-2025-58160...

CVE-2025-57806

Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page...

CVE-2025-57806

Summary: CVE-2025-57806 affects Local Deep Research. Versions 0.2.0–0.6.7 store confidential information, including API keys, in a local SQLite database without encryption. This plaintext storage occurs in the .db file and is accessible to anyone with access to the container or host filesystem. T...

Fedora 44 : rust-matchers / rust-tracing-subscriber (2025-75e3e58200)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-75e3e58200 advisory. - Update the tracing-subscriber crate to version 0.3.20. - Update the matchers crate to version 0.2.0. This update also includes a fix for CVE-2025-58160...

CVE-2025-45146

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/datamanager.py. This vulnerability allows attackers to execute arbitrary code via supplying crafted data...

framework-inputmodule-control-0.2.0-3.1 on GA media (moderate)

framework-inputmodule-control-0.2.0-3.1 on GA media Announcement ID: openSUSE-SU-2025:15433-1 Rating: moderate Cross-References: CVE-2023-53156 CVE-2024-58266 CVSS scores: CVE-2023-53156 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2023-53156 SUSE : 6.9...

Linux Distros Unpatched Vulnerability : CVE-2024-6284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended...

OPENSUSE-SU-2025:15433-1 framework-inputmodule-control-0.2.0-3.1 on GA media

These are all security issues fixed in the framework-inputmodule-control-0.2.0-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-45146

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/datamanager.py. This vulnerability allows attackers to execute arbitrary code via supplying crafted data...

ModelCache 安全漏洞

ModelCache is a codefuse-ai open source LLM semantic caching system designed to enhance user experience by caching query results to reduce response time. A security vulnerability exists in ModelCache v0.2.0 and earlier versions, which stems from improper deserialization of /manager/datamanager.py...

nest 命令注入漏洞

nest is a Node.js framework open-sourced by nestjs for building efficient, scalable and enterprise-class server-side applications using TypeScript/JavaScript. A command injection vulnerability exists in nest 0.2.0 and earlier versions, which stems from the presence of an insecure JavaScript sandb...

a2 (>=0.10.7 <=0.10.13), aad2onnx (=0.1.4) +1441 more potentially affected by CVE-2025-51480 via onnx (>=0.2.0 <=1.9.0)

onnx PYPI version =0.2.0, =0.10.7, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.4.4, =0.1.0, =0.0.0, =1.0.1 and more Source cves: CVE-2025-51480 Source advisory: SNYK:PYTHON-ONNX-10877916...

CVE-2025-48755

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST zero-sized type...

PT-2025-22832

Name of the Vulnerable Software and Affected Versions spiral-rs crate version 0.2.0 Description The issue concerns the spiral-rs crate for Rust, where allocation can be attempted for a ZST zero-sized type. Recommendations For spiral-rs crate version 0.2.0, consider avoiding allocations for...

CVE-2024-51849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marco Piarulli My Restaurant Menu my-restaurant-menu allows Stored XSS.This issue affects My Restaurant Menu: from n/a through = 0.2.0...

CVE-2023-26047

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

CVE-2021-21269

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...

CVE-2020-24359

HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP address assigned to that interface. Fixed in 0.2.0...