com.digitalpebble.stormcrawler:storm-crawler-opensearch (>=2.9, <=2.11), com.erudika:para-search-elasticsearch (>=1.41.1, <=1.41.3) +109 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=2.6.0, <=2.19.3)

org.opensearch:opensearch-common MAVEN version =2.6.0, =2.9, =1.41.1, =1.0.0-test, =3.0.3, =13.38.0.release, =13.38.0.release, =13.38.0.release, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =2.8.0.1, =0.8.0, =0.17.0 and more Source cves: CVE-2025-9624 Source advisory:...

com.erudika:para-search-elasticsearch (1.42.0), org.codelibs.fesen.client:fesen-httpclient (>=3.0.0, <=3.2.0) +43 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=3.0.0, <=3.2.0)

org.opensearch:opensearch-common MAVEN version =3.0.0, =3.0.0, =15.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0.0, =3.22.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2025-9624 Source advisory: GHSA-MW3V-MMFW-3X2G...

com.erudika:para-search-elasticsearch (1.42.0), org.codelibs.fesen.client:fesen-httpclient (>=3.0.0, <=3.2.0) +43 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=3.0.0, <=3.2.0)

org.opensearch:opensearch-common MAVEN version =3.0.0, =3.0.0, =15.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0.0, =3.22.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2025-9624 Source advisory: OSV:GHSA-MW3V-MMFW-3X2G...

com.digitalpebble.stormcrawler:storm-crawler-opensearch (>=2.9, <=2.11), com.erudika:para-search-elasticsearch (>=1.41.1, <=1.41.3) +109 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=2.6.0, <=2.19.3)

org.opensearch:opensearch-common MAVEN version =2.6.0, =2.9, =1.41.1, =1.0.0-test, =3.0.3, =13.38.0.release, =13.38.0.release, =13.38.0.release, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =2.8.0.1, =0.8.0, =0.17.0 and more Source cves: CVE-2025-9624 Source advisory:...

com.erudika:para-search-elasticsearch (1.42.0), org.codelibs.fesen.client:fesen-httpclient (>=3.0.0, <=3.2.0) +43 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=3.0.0, <=3.2.0)

org.opensearch:opensearch-common MAVEN version =3.0.0, =3.0.0, =15.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0.0, =3.22.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2025-9624 Source advisory: MEND:CVE-2025-9624...

SUSE-SU-2025:4229-1 Security update for buildah

This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

CVE-2025-64730

creationtimestamp| type| source ---|---|--- 2025-11-25 08:21:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gvvw66fw2s...

CVE-2025-54563

creationtimestamp| type| source ---|---|--- 2025-11-25 01:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g7ib253v2k...

EUVD-2025-199405

Malicious code in @voiceflow/nestjs-common npm...

MAL-2025-191357 Malicious code in @voiceflow/nestjs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d3635e3e4ea7fe67bd91fc10dbb52d16b29a74193117747292587c6fd1d5ef The package @voiceflow/nestjs-common was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191340 Malicious code in @voiceflow/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b6225a913c42ff3e119872d881af1992d5de51a2cf9632f3c055a8fd577c9 The package @voiceflow/common was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b6225a913c42ff3e119872d881af1992d5de51a2cf9632f3c055a8fd577c9 The package @voiceflow/common was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199422

Malicious code in @voiceflow/common npm...

Malicious code in @voiceflow/test-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f63a9f42565b5107e8f6684e1079874b29df133cb9d0bb1f425adf7317a6a50 The package @voiceflow/test-common was found to contain malicious code. Source: ghsa-malware...

Oracle Linux 8 : libssh (ELSA-2025-21977)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21977 advisory. 0.9.6-16 - Fix CVE-2025-5372 Resolves: RHEL-121232 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

ipa security update

4.12.2-22.0.1.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-22.1 - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA 4.12.2-22 - Resolves: RHEL-107483 ipa-ca-install fails on...

runc security update

4:1.3.0-4 - rename errors.go to errorslinux.go - Related: RHEL-122400 4:1.3.0-3 - Add relevant patches to CVEs - Resolves: RHEL-122400 4:1.3.0-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolves: RHEL-122414...

EUVD-2025-199138

Malicious code in @surajh/medium-common npm...

EUVD-2025-199150

Malicious code in @pradhumngautam/common-app npm...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-66019 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-66019 Source advisory: OSV:GHSA-M449-CWJH-6PW7...