13553 matches found
Malicious code in azure-ipam-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-42126 Malicious code in azure-functions-templates-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...
Malicious code in azure-functions-templates-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...
SUSE-SU-2025:03011-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIGX86INTELTSXMODEAUTO bsc1139073, bsc1246695. - CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio...
MAL-2025-41622 Malicious code in azure-iothub-service-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in azure-iothub-service-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2022-39327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection...
Securing and governing the rise of autonomous agents
In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...
Securing and governing the rise of autonomous agents
In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio bsc1225707. CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357:...
CVE-2025-53763
Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...
MAL-2025-41282 Malicious code in azure-ai-foundry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6397746f8f17f740ba33999b71f8e214096f472aaa54614d8603deeb72435c8 The OpenSSF Package Analysis project identified 'azure-ai-foundry' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in azure-ai-foundry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6397746f8f17f740ba33999b71f8e214096f472aaa54614d8603deeb72435c8 The OpenSSF Package Analysis project identified 'azure-ai-foundry' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
OESA-2025-2070 restic security update
restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fixes: A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library Cloud Software the affected version unknown. It has been rated as problematic.Using CWE...
OESA-2025-2069 restic security update
restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fixes: A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library Cloud Software the affected version unknown. It has been rated as problematic.Using CWE...
OESA-2025-2066 restic security update
restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fixes: A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library Cloud Software the affected version unknown. It has been rated as problematic.Using CWE...
CVE-2025-54364
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...
CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
