MAL-2025-49132 Malicious code in epic-diesel-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b6d638d3a170a3ff9d1cf8eac99c602e6d45668781897593cdc2840c5bc277 The package epic-diesel-common was found to contain malicious code...

Malicious code in epic-diesel-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b6d638d3a170a3ff9d1cf8eac99c602e6d45668781897593cdc2840c5bc277 The package epic-diesel-common was found to contain malicious code...

Malicious code in epic-common-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e76e853a5ddeb0b5baed9270a0858d1df0976691cfd336b223e8208c241371 The package epic-common-node was found to contain malicious code...

MAL-2025-49163 Malicious code in epic-messages-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9745b9ed602a183e12765c8c88cd916f6b6147eee9c07ab628425f5463adbf9 The package epic-messages-common was found to contain malicious code...

MAL-2025-49125 Malicious code in epic-common-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e76e853a5ddeb0b5baed9270a0858d1df0976691cfd336b223e8208c241371 The package epic-common-node was found to contain malicious code...

EUVD-2025-37169

Malicious code in epic-common npm...

Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

EUVD-2025-37161

Malicious code in epic-diesel-common npm...

Malicious code in epic-messages-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9745b9ed602a183e12765c8c88cd916f6b6147eee9c07ab628425f5463adbf9 The package epic-messages-common was found to contain malicious code...

MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...

MAL-2025-49124 Malicious code in epic-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d1ee5aef53675a9fb367bfbb6e08505b9584394391d2d0c3d6af4529dab29f The package epic-common was found to contain malicious code...

Malicious code in epic-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d1ee5aef53675a9fb367bfbb6e08505b9584394391d2d0c3d6af4529dab29f The package epic-common was found to contain malicious code...

MAL-2025-49174 Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

CLSA-2025-1761844351 gnutls: Fix of CVE-2025-6395

CVE-2025-6395: fix NULL pointer dereference in gnutlsfigurecommonciphersuite...

CVE-2025-40096

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the enforcer that uses environment variables without sanitation. An attacker can execute arbitrary commands or cause a buffer overflow by supplying crafted input to the affected component. Remediation Upgrade...

DEBIAN-CVE-2025-40094

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

CVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

MAL-2025-49083 Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...