Photon OS 5.0: Emacs PHSA-2025-5.0-91-0512

An update of the emacs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0512. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

aana (>=0.2.1, <=0.2.2.2), aios-core (>=0.0.1b1, <=0.0.1b2) +53 more potentially affected by CVE-2025-30202 via vllm (>=0.5.3.post1, <=0.8.4)

vllm PYPI version =0.5.3.post1, =0.2.1, =0.0.1b1, =0.1.0, =0.1.15rc1, =0.2.13, =0.1.0, =0.1.0a0, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =0.5.0, =1.0.3 and more Source cves: CVE-2025-30202 Source advisory: OSV:PYSEC-2026-2016...

EUVD-2025-30202

Malicious code in bioql PyPI...

CVE-2025-30202

creationtimestamp| type| source ---|---|--- 2025-04-30 03:30:38+00:00| published-proof-of-concept| Telegram/hbVDftoo7cklg62Gdj6otKY7hUkOaO8wH7xugOEL8u8l2Gc 2025-04-30 03:50:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyvdl4h4h2l 2025-04-30 05:22:33+00:00| seen|...

CVE-2025-30202

CVE-2025-30202 affects vLLM versions 0.5.2 up to 0.8.4 (prior to 0.8.5) in multi-node deployments. The root cause is an XPUB ZeroMQ socket bound to ALL interfaces on the primary host used for tensor parallelism, which can be accessed by any client with network access. This allows potential data e...

CVE-2025-30202 Data exposure via ZeroMQ on multi-node vLLM deployment

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and prior to 0.8.5 are vulnerable to denial of service and data exposure via ZeroMQ on multi-node vLLM deployment. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-no...

CVE-2025-30202 Data exposure via ZeroMQ on multi-node vLLM deployment

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and prior to 0.8.5 are vulnerable to denial of service and data exposure via ZeroMQ on multi-node vLLM deployment. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-no...

aana (>=0.2.1, <=0.2.2.2), aios-core (>=0.0.1b1, <=0.0.1b2) +53 more potentially affected by CVE-2025-30202 via vllm (>=0.5.3.post1, <=0.8.4)

vllm PYPI version =0.5.3.post1, =0.2.1, =0.0.1b1, =0.1.0, =0.1.15rc1, =0.2.13, =0.1.0, =0.1.0a0, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =0.5.0, =1.0.3 and more Source cves: CVE-2025-30202 Source advisory: SNYK:PYTHON-VLLM-10043122...

Linux Distros Unpatched Vulnerability : CVE-2024-30202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30202 Note that Nessus reli...

Azure Linux 3.0 Security Update: emacs (CVE-2024-30202)

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30202 advisory. - In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode...

CBL Mariner 2.0 Security Update: emacs (CVE-2024-30202)

The version of emacs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30202 advisory. - In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode...

[BSA-119] Security Update for emacs

Sean Whitton uploaded new packages for emacs which fixed the following security problems: CVE-2024-30202 In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30203 believed bogus, request submitted to MITRE to merge...

CVE-2024-30202 affecting package emacs for versions less than 29.3-1

CVE-2024-30202 affecting package emacs for versions less than 29.3-1. An upgraded version of the package is available that resolves this issue...

Important: emacs

Issue Overview: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30202 Affected Packages: emacs Issue Correction: Run dnf update emacs --releasever 2023.4.20240416 or dnf update --advisory ALAS2023-2024-584...

Important: emacs

Issue Overview: In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30202 Affected Packages: emacs Issue Correction: Run dnf update emacs --releasever 2023.4.20240416 to update your system. New Packages: aarch64: ...

CVE-2024-30202 affecting package emacs for versions less than 29.3-1

CVE-2024-30202 affecting package emacs for versions less than 29.3-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

CVE-2024-30202

The GNU Emacs text editor is vulnerable to the execution of arbitrary Lisp code triggered when enabling Org mode . This issue affects Emacs versions prior to 29.3 and specifically impacts Org Mode versions before 9.6.23 . Impact details are not explicitly provided, but the vulnerability allows fo...

CVE-2024-30202

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...