GHSA-7MV8-J34Q-VP7Q @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the...

AudioFile 安全漏洞

AudioFile is a simple C++ library containing only header files by the individual developer Adam Stark in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile version v0.3.7, which stems from a null pointer dereference in the ModuleState::setup function...

Regular Expression Denial Of Service (ReDoS)

transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...

EUVD-2007-5043

Malware in sbrugna...

EUVD-2006-7187

Malware in sbrugna...

EUVD-2008-3299

Malware in sbrugna...

EUVD-2011-1912

Malware in sbrugna...

EUVD-2024-45088

Malicious code in bioql PyPI...

EUVD-2024-34433

Malicious code in bioql PyPI...

EUVD-2024-34846

Malicious code in bioql PyPI...

EUVD-2024-37259

Malicious code in bioql PyPI...

EUVD-2024-37920

Malicious code in bioql PyPI...

EUVD-2022-33758

Malicious code in bioql PyPI...

EUVD-2025-30889

Malicious code in bioql PyPI...

EUVD-2023-23755

Malicious code in bioql PyPI...

EUVD-2024-36489

Malicious code in bioql PyPI...

EUVD-2025-12061

Malicious code in bioql PyPI...

EUVD-2022-40687

Malicious code in bioql PyPI...

SUSE CVE-2025-6921

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

GHSA-4W7R-H757-3R74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...