CVE-2025-64730

creationtimestamp| type| source ---|---|--- 2025-11-25 08:21:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gvvw66fw2s...

CVE-2025-54563

creationtimestamp| type| source ---|---|--- 2025-11-25 01:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g7ib253v2k...

EUVD-2025-199405

Malicious code in @voiceflow/nestjs-common npm...

MAL-2025-191357 Malicious code in @voiceflow/nestjs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d3635e3e4ea7fe67bd91fc10dbb52d16b29a74193117747292587c6fd1d5ef The package @voiceflow/nestjs-common was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191340 Malicious code in @voiceflow/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b6225a913c42ff3e119872d881af1992d5de51a2cf9632f3c055a8fd577c9 The package @voiceflow/common was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b6225a913c42ff3e119872d881af1992d5de51a2cf9632f3c055a8fd577c9 The package @voiceflow/common was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199422

Malicious code in @voiceflow/common npm...

Malicious code in @voiceflow/test-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f63a9f42565b5107e8f6684e1079874b29df133cb9d0bb1f425adf7317a6a50 The package @voiceflow/test-common was found to contain malicious code. Source: ghsa-malware...

Oracle Linux 8 : libssh (ELSA-2025-21977)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21977 advisory. 0.9.6-16 - Fix CVE-2025-5372 Resolves: RHEL-121232 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

ipa security update

4.12.2-22.0.1.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-22.1 - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA 4.12.2-22 - Resolves: RHEL-107483 ipa-ca-install fails on...

runc security update

4:1.3.0-4 - rename errors.go to errorslinux.go - Related: RHEL-122400 4:1.3.0-3 - Add relevant patches to CVEs - Resolves: RHEL-122400 4:1.3.0-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolves: RHEL-122414...

EUVD-2025-199138

Malicious code in @surajh/medium-common npm...

EUVD-2025-199150

Malicious code in @pradhumngautam/common-app npm...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-66019 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-66019 Source advisory: OSV:GHSA-M449-CWJH-6PW7...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Updated ruby-rack packages fix security vulnerabilities

Possible Log Injection in Rack::CommonLogger. CVE-2025-25184 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection. CVE-2025-27111 Local File Inclusion in Rack::Static. CVE-2025-27610...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198601

Malicious code in cbre-flow-common npm...

Malicious code in cbre-flow-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947d73050012f020f6fdd2335ac7c8602c707fb84fb141fbfdd1e88a30ca3650 The package cbre-flow-common was found to contain malicious code. Source: ossf-package-analysis...