EUVD-2025-71686

Malicious code in addedmagpiez3n npm...

EUVD-2025-71685

Malicious code in addedsturgeonz3n npm...

Malicious code in added_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bc15a9ddd510d72544a7d2158c38bb9eeb081fb1bebf506caedbe97d70df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65431

Malicious code in addedpythonrequirement npm...

EUVD-2025-87328

Malicious code in addedbedbugz3n npm...

MAL-2025-82859 Malicious code in added_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448f477f8846d5d2d3b812848c1dd208493202749f306cfa76f0604b67c63973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56014

Malicious code in added-yellow-tiglon npm...

EUVD-2025-56015

Malicious code in added-violet-coyote npm...

MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50745

Malicious code in addedxerinaez3n npm...

EUVD-2025-50746

Malicious code in addedhedgehogz3n npm...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z. jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3987 GHSA-fmjh-f678-cv3x GO-2025-3988 GHSA-wpwj-69cm-q9c5 GO-2025-3999 GHSA-3g72-chj4-2228...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989457 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400notify It is easy to hit the below memory leaks in my...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988980 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load using raidctr, dm-rai...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989556 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load using raidctr, dm-rai...

CVE-2025-43479

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

PT-2025-44876

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to identify what other apps a user has installed...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: HID: usbhid: Eliminated a recurring out-of-bounds bug in usbhidparse. Updated the struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor according to the USB HID 1.11 specification. Note...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-24893link is external XWiki Platform Eval Injection Vulnerability CVE-2025-41244link is external Broadcom VMware Aria Operations and VMware Tools Privilege...