[SECURITY] Fedora 43 Update: rust-protobuf-codegen-3.7.2-1.fc43

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

[SECURITY] Fedora 41 Update: rust-protobuf-codegen-3.7.2-1.fc41

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

Fedora 41 : mirrorlist-server / rust-maxminddb / rust-prometheus / etc (2025-2503abb88f)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-2503abb88f advisory. - Update mirrorlist-server to version 3.0.8. - Update the maxminddb crate to version 0.26.0. - Update the prometheus crate to version 0.14.0. - Update the...

EUVD-2021-0669

Malware in sbrugna...

EUVD-2021-0688

Malware in sbrugna...

EUVD-2018-0697

Malware in sbrugna...

mruby:mruby_fuzzer: Global-buffer-overflow in gen_addsub

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4591125819359232 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5954a2c047ac Crash State...

Fedora 44 : mirrorlist-server / rust-maxminddb / rust-protobuf / etc (2025-41d833fe83)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-41d833fe83 advisory. - Update mirrorlist-server to version 3.0.8. - Update the maxminddb crate to version 0.26.0. - Update the protobuf and protobuf-codegen crates to version...

Linux Distros Unpatched Vulnerability : CVE-2014-3152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before...

Malicious code in @toptal/davinci-graphql-codegen-extensions (npm)

The package communicates with a domain associated with malicious activity...

DEBIAN-CVE-2025-7207

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scopenew of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locall...

UBUNTU-CVE-2025-7207

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scopenew of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locall...

@aws-amplify/amplify-util-uibuilder (>=1.1.2-beta.1, <=1.14.27), @aws-amplify/cli (>=7.6.2-beta.1, <=7.7.0-flutter-preview.2) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=1.2.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =1.2.0, =1.1.2-beta.1, =7.6.2-beta.1, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: MEND:CVE-2025-4318...

CVE-2025-4318

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build...

@aws-amplify/amplify-util-uibuilder (>=1.1.2-beta.1, <=1.14.27), @aws-amplify/cli (>=7.6.2-beta.1, <=7.7.0-flutter-preview.2) +5 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui (>=1.0.0, <=2.20.3-cb2b479.0)

@aws-amplify/codegen-ui NPM version =1.0.0, =1.1.2-beta.1, =7.6.2-beta.1, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =1.0.0, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: MEND:CVE-2025-4318...

Amplify Codegen UI security vulnerability

Amplify Codegen UI is an AWS Amplify open source React component generated for use in the AWS Amplify project. A security vulnerability exists in Amplify Codegen UI that stems from a lack of input validation for AWS Amplify Studio UI component property expressions, which could lead to the executi...

CVE-2025-4318: Improper Neutralization of Directives in Dynamically Evaluated Code

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build...

CVE-2022-24881

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

Malware in azure-sdk-for-java-codegen

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in azure-sdk-for-java-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80272d9c808f50bcde1ac09ec61a64d13c6151cb5ce8724af88330aaa8a0cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...