792 matches found
GHSA-GV8H-7V7W-R22Q Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...
MAL-2025-48802 Malicious code in circuit-codegen-annotations-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-codegen-annotations-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-codegen-annotations (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48801 Malicious code in circuit-codegen-annotations (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2022-54809
In the Linux kernel, the following vulnerability has been resolved: net: annotate races around sk-skbounddevif UDP sendmsg is lockless, and reads sk-skbounddevif while this field can be changed by another thread. Adds minimal annotations to avoid KCSAN splats for UDP. Following patches will add...
RLSA-2025:12280 Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fixes: com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
RockyLinux 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (RLSA-2025:12280)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12280 advisory. com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 Tenable has extracted the preceding description block directly...
OESA-2025-2461 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to S...
OESA-2025-2460 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to S...
org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions...
[SECURITY] [DLA 4324-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4324-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 07, 2025 https://wiki.debian.org/LTS -...
EUVD-2021-12630
Malware in sbrugna...
EUVD-2018-6223
Malware in sbrugna...
EUVD-2018-6226
Malware in sbrugna...
EUVD-2014-8717
Malware in sbrugna...
EUVD-2018-6222
Malware in sbrugna...
EUVD-2018-6219
Malware in sbrugna...