MAL-2025-20916 Malicious code in fpa-base (npm)

The package fpa-base was found to contain malicious code...

MAL-2025-21037 Malicious code in fullcube-angular-base (npm)

The package fullcube-angular-base was found to contain malicious code...

MAL-2025-33102 Malicious code in shipping_base (npm)

The package shippingbase was found to contain malicious code...

MAL-2025-28641 Malicious code in pac-theme-base (npm)

The package pac-theme-base was found to contain malicious code...

MAL-2025-7943 Malicious code in @frozen-team/eslint-config-base (npm)

The package @frozen-team/eslint-config-base was found to contain malicious code...

MAL-2025-17481 Malicious code in confkit-base (npm)

The package confkit-base was found to contain malicious code...

MAL-2025-7951 Malicious code in @frozen-team-qa/ga-store-base (npm)

The package @frozen-team-qa/ga-store-base was found to contain malicious code...

MAL-2025-26188 Malicious code in mene-base (npm)

The package mene-base was found to contain malicious code...

MAL-2025-10768 Malicious code in @zalastax/nolb-base9 (npm)

The package @zalastax/nolb-base9 was found to contain malicious code...

MAL-2025-31836 Malicious code in react-pdd-base (npm)

The package react-pdd-base was found to contain malicious code...

MAL-2025-7122 Malicious code in @bttr-devs/nuxt-layer-base (npm)

The package @bttr-devs/nuxt-layer-base was found to contain malicious code...

MAL-2025-37867 Malicious code in univision-fe-componets-base (npm)

The package univision-fe-componets-base was found to contain malicious code...

MAL-2025-18465 Malicious code in dip-client-base (npm)

The package dip-client-base was found to contain malicious code...

Malicious code in pac-theme-base (npm)

The package pac-theme-base was found to contain malicious code...

MAL-2025-17482 Malicious code in confkit-base-module-defaultheaders (npm)

The package confkit-base-module-defaultheaders was found to contain malicious code...

CVE-2025-8714

A flaw was found in PostgreSQL. This vulnerability allows a malicious superuser on a PostgreSQL server to inject arbitrary code into dump files created by pgdump, pgdumpall, and pgrestore, causing arbitrary code execution on the client machine when these dump files are restored by psql due to...

Security Bulletin: A Security Vulnerability was found in the IBM Security Verify Access product.

Summary IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password Vulnerability Details CVEID:CVE-2024-45647 DESCRIPTION: IBM Security Verify Access could allow could an unverified user to change the password...

Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244404. CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser bsc1244403. CVE-2025-47806: Fixed stack buffer overflow in SubRip...

SUSE-SU-2025:02796-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244404. - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser bsc1244403. - CVE-2025-47806: Fixed stack buffer overflow in SubRi...

USN-7696-1 libssh vulnerabilities

Ronald Crane discovered that libssh incorrectly handled certain base64 conversions. An attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-4877 Ronald Crane discovered that libssh incorrectly handled the...