EUVD-2025-180456

Malicious code in alpha-deserialize-book-upsilon-pi npm...

EUVD-2025-177622

Malicious code in new-transpile-alpha-log-proxy npm...

MAL-2025-185435 Malicious code in alpha-view-grep-abstract-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a59d4ced0983d05722b6d4aa572be26e524f6f5a4608478d2b47cdfcd656793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178380

Malicious code in integer-optimize-alpha-byte-authenticate npm...

Malicious code in route-proxy-alpha-export-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ed7ce7a196ba7ed5bc586cfdd287f1bcf2abf295da782560005753652fe5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176170

Malicious code in stub-scale-alpha-epsilon-optimize npm...

EUVD-2025-176646

Malicious code in rho-alpha-phi-cluster-water npm...

EUVD-2025-176053

Malicious code in tau-upsilon-function-alpha-kernel npm...

EUVD-2025-177426

Malicious code in optimize-proxy-alpha-cache-decompress npm...

EUVD-2025-179159

Malicious code in emulate-private-alpha-decompress-view npm...

EUVD-2025-178021

Malicious code in long-sigma-authenticate-alpha-analyze npm...

MAL-2025-189229 Malicious code in rho-alpha-phi-cluster-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7a4ef57dd54f76ac6aa11467b48f4f5cc687a1a46e1934d0b1dff8c2cf4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185433 Malicious code in alpha-integer-pi-assert-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34951bfb26b2bf73403b5a41d1b38d6088c5a6558b84230cd7bb1e901125fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64484

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashe...

PT-2025-46206

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.5.0-alpha.5 Description Parse Server, an open-source backend deployable on Node.js infrastructures, allows any client to execute MongoDB explain queries without requiring the master key. The explain method...

CLSA-2025-1762544876 Fix CVE(s): CVE-2025-55004

SECURITY UPDATE: heap-buffer overflow read in MNG - debian/patches/CVE-2025-55004.patch: Fix heap buffer overflow issue in MNG magnification with alpha channel - debian/patches/fix-missing-cast-function.patch: Fix missing CastDoubleToLong function failing build - CVE-2025-55004...

Parse Server 代码问题漏洞

Parse Server is an open source backend from Parse Platform Open Source that can be deployed to any infrastructure that can run Node.js. A code issue vulnerability exists in Parse Server versions 4.2.0 through 7.5.3 and 8.0.0 through 8.3.1-alpha.1, which stems from improper handling of the uri...

CLSA-2025-1761847256 Fix CVE(s): CVE-2022-47673, CVE-2023-25584

SECURITY UPDATE: multiple vulnerabilities in vms-alpha.c parsemodule - debian/patches/CVE-2022-47673CVE-2023-25584-.patch: fix null pointer dereference in parsemodule by adding return value checking for bfdzalloc calls, fix potential out of bounds memory access in DST record parsing loop -...

SUSE CVE-2025-10680

OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...

OSV-2025-855 Use-of-uninitialized-value in AlphaReplace_SSE2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454314139 Crash type: Use-of-uninitialized-value Crash state: AlphaReplaceSSE2 WebPReplaceTransparentPixels WebPEncode...