Amazon Linux 2 : python3, --advisory ALAS2-2025-3084 (ALAS-2025-3084)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3084 advisory. If the value passed to os.path.expandvars is user-controlled aperformance degradation is possible when expanding...

Amazon Linux 2 : cri-tools, --advisory ALAS2-2025-3079 (ALAS-2025-3079)

The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3079 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2025-078 (ALASNITRO-ENCLAVES-2025-078)

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-078 advisory. containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,...

Medium: postgresql

Issue Overview: Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail...

Malicious code in elf-stats-northbound-drum-422 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff646d1c5430cafc2a1ae16cec7477bd8a2f9b81bec9ba8cdaba97b24f16e004 The package elf-stats-northbound-drum-422 was found to contain malicious code...

Malicious code in elf-stats-candlelit-hollyberry-248 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48c0580ac5b5930d0998a8fd8750cd281babbb29ef73f9ecf04334f5a8ecd0 The package elf-stats-candlelit-hollyberry-248 was found to contain malicious code...

Malicious code in elf-stats-lanternlit-saddlebag-279 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fe295c9017f7da0ef4b1fe47a7a422c26c794229397b63d9ea7711f26a4591 The package elf-stats-lanternlit-saddlebag-279 was found to contain malicious code...

MAL-2025-192343 Malicious code in elf-stats-velvet-train-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18265736ea9a5d9727aadb6a21bf442587049cf9c8126b018a4915cf9842863a The package elf-stats-velvet-train-152 was found to contain malicious code...

MAL-2025-192347 Malicious code in sd-123456 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...

MAL-2025-192340 Malicious code in elf-stats-sparkly-icicle-845 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00a4c6e13ebfbe200eee9020b717298e81754ca9f6c27943ba6e02d9aa31aff The package elf-stats-sparkly-icicle-845 was found to contain malicious code...

Malicious code in elf-stats-velvet-train-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18265736ea9a5d9727aadb6a21bf442587049cf9c8126b018a4915cf9842863a The package elf-stats-velvet-train-152 was found to contain malicious code...

Malicious code in ambient-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03e10d2eec7143fda8062e504341041a8123bc6f2a0d7223ce9ced959b7dd1 The package ambient-map was found to contain malicious code...

MAL-2025-192335 Malicious code in elf-stats-mulled-snowglobe-636 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67abba45322e79dde009c80b6945042d05796dcb95f3a7e42a0135a03811c63 The package elf-stats-mulled-snowglobe-636 was found to contain malicious code...

Malicious code in elf-stats-cosy-toy-308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code...

Malicious code in elf-stats-midnight-rocket-813 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff097f7c813e420b8136ad3caa145a545e08d315d7f9125f824b2a3607c4ae88 The package elf-stats-midnight-rocket-813 was found to contain malicious code...

MAL-2025-192345 Malicious code in native-component-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5b5fc0df7145b301573dc029802ddf1c8f351945d0877d43e499a34192673f The package native-component-list was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-shimmering-toolkit-483 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa849828ae330627573a02a9cfec420e470cf5dcfa587e0080e3db4105f31ad2 The package elf-stats-shimmering-toolkit-483 was found to contain malicious code...

Malicious code in elf-stats-whimsical-pantry-974 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609f44e692415de1702ea2e67a3f1cf76c7e96a2d2e749d66851f9072f583f4d The package elf-stats-whimsical-pantry-974 was found to contain malicious code...

Malicious code in non-modular-buildable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c55595895f1b12b30a16c099606601b1bb2a29cd30ac341a2095d224b33963 The package non-modular-buildable was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-snowdusted-chimney-406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a6efef2f245df6129dd6f2942074a1f09f4a587b963499865455bddb47fbf The package elf-stats-snowdusted-chimney-406 was found to contain malicious code...