EUVD-2025-37161

Malicious code in epic-diesel-common npm...

MAL-2025-49125 Malicious code in epic-common-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e76e853a5ddeb0b5baed9270a0858d1df0976691cfd336b223e8208c241371 The package epic-common-node was found to contain malicious code...

MAL-2025-49181 Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

EUVD-2025-37188

Malicious code in @ra-web-tech-ui-toolkit/common-utils npm...

MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...

Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

Malicious code in epic-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d1ee5aef53675a9fb367bfbb6e08505b9584394391d2d0c3d6af4529dab29f The package epic-common was found to contain malicious code...

Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

EUVD-2025-37112

Malicious code in epic-react-common npm...

Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...

MAL-2025-49163 Malicious code in epic-messages-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9745b9ed602a183e12765c8c88cd916f6b6147eee9c07ab628425f5463adbf9 The package epic-messages-common was found to contain malicious code...

EUVD-2025-37130

Malicious code in epic-messages-common npm...

EUVD-2025-37119

Malicious code in epic-node-services-common npm...

CLSA-2025-1761844351 gnutls: Fix of CVE-2025-6395

CVE-2025-6395: fix NULL pointer dereference in gnutlsfigurecommonciphersuite...

CVE-2025-40096

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the enforcer that uses environment variables without sanitation. An attacker can execute arbitrary commands or cause a buffer overflow by supplying crafted input to the affected component. Remediation Upgrade...

DEBIAN-CVE-2025-40094

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

CVE-2025-40099

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...

apache-airflow (>=3.0.0, <=3.0.5rc3), apache-airflow-providers-cohere (>=1.1.3rc1, <=1.4.0) +3 more potentially affected by CVE-2025-54941 via apache-airflow-core (>=3.0.0, <=3.0.5rc3)

apache-airflow-core PYPI version =3.0.0, =3.0.0, =1.1.3rc1, =1.0.0, =1.0.6, =1.0.9 Source cves: CVE-2025-54941 Source advisory: MEND:CVE-2025-54941...

Malicious Package

Overview esg-odf-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...