CVE-2025-65963 CFiles Unauthorized Folder/ZIP Access in Public Spaces

Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has bee...

EUVD-2025-199664

Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has bee...

[SECURITY] Fedora 42 Update: buildah-1.42.1-1.fc42

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

EUVD-2025-199370

Malicious code in create-silgi npm...

Malicious code in create-silgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1bd1ddfab5f3ea6caf4f09a93f2ef08f7298e2d68892949e0a6f2975cd1b78 The package create-silgi was found to contain malicious code. Source: google-open-source-security...

Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199168

Malicious code in create-director-app npm...

MAL-2025-191082 Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-mcp-use-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198905

Malicious code in create-mcp-use-app npm...

MAL-2025-190922 Malicious code in create-mcp-use-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198838

Malicious code in create-hardhat3-app npm...

MAL-2025-190839 Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198773

Malicious code in create-glee-app npm...

Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

MAL-2025-190767 Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

OESA-2025-2728 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

OESA-2025-2730 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...