ravynOS 安全漏洞

ravynOS is an operating system open-sourced by RavynSoft. A security vulnerability exists in ravynOS 0.5.2 and earlier versions, which stems from a null pointer dereference...

PT-2025-49808

NULL Pointer Dereference vulnerability in ravynsoft ravynos.This issue affects ravynos: through 0.5.2...

Git Lfs 后置链接漏洞

Git Lfs is a command line tool from the Git Lfs team for working with large files in git projects. A backlink vulnerability exists in Git Lfs versions 0.5.2 through 3.7.0, which stems from an unchecked symbolic link that could result in writing to an arbitrary file system location...

EUVD-2006-1045

Malware in sbrugna...

EUVD-2019-13436

Malware in sbrugna...

EUVD-2021-11586

Malware in sbrugna...

EUVD-2006-1046

Malware in sbrugna...

EUVD-2023-36449

Malicious code in bioql PyPI...

EUVD-2022-0469

Malicious code in bioql PyPI...

OPENSUSE-SU-2025:15586-1 kubecolor-0.5.2-1.1 on GA media

These are all security issues fixed in the kubecolor-0.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2021-21235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specificall...

Information Exposure

Overview x402 is a x402 Payment Protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers. Remediation Upgrade x40...

Information Exposure

Overview x402-hono is a x402 Payment Protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers. Remediation Upgrad...

x402 SDK vulnerable in outdated versions in resource servers for builders

Impact There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds. This primarily impacts builders working on resource servers. Patches Please update to the following package versions: x402 = 0.5.2 x402-next = 0.5.2...

GHSA-3J63-5H8P-GF7C x402 SDK vulnerable in outdated versions in resource servers for builders

Impact There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds. This primarily impacts builders working on resource servers. Patches Please update to the following package versions: x402 = 0.5.2 x402-next = 0.5.2...

OPENSUSE-SU-2025:15373-1 jupyter-jupyterlab-templates-0.5.2-3.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15274-1 jupyter-jupyterlab-templates-0.5.2-2.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-25117

php-svg-lib is a scalable vector graphics SVG file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP 8.0, and doesn't validate if external references are allowed. This might leads to bypass...

CVE-2023-5051

The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrailform' shortcode in versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping on the 'formid' user supplied attribute. This makes it possible fo...

CVE-2022-39280

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...