@laboratory-one/api-components (>=0.0.22, <=26.63.0) potentially affected by CVE-2025-65944 via @sentry/nestjs (10.12.0)

@sentry/nestjs NPM version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/nestjs and may be impacted: - @laboratory-one/api-components =0.0.22, =26.63.0 Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

@laboratory-one/api-components (>=0.0.22, <=26.63.0) potentially affected by CVE-2025-65944 via @sentry/nestjs (10.12.0)

@sentry/nestjs NPM version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/nestjs and may be impacted: - @laboratory-one/api-components =0.0.22, =26.63.0 Source cves: CVE-2025-65944 Source advisory: GHSA-6465-JGVQ-JHGP...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @kvytech/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e27717d96aa14c260a48ca84c38f3f08f6b3352f82cd27b83ac56547c46cc6 The package @kvytech/components was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198783

Malicious code in @kvytech/components npm...

Malicious code in @orbitgtbelgium/orbit-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190669 Malicious code in @orbitgtbelgium/orbit-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198653

Malicious code in @orbitgtbelgium/orbit-components npm...

Malicious code in @asyncapi/generator-components (npm)

@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...

EUVD-2025-198686

Malicious code in @asyncapi/generator-components npm...

ALSA-2025:21936 Important: valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

Audio/Video Mozilla Firefox ESR DoS

The vulnerability of the Audio/Video components in Mozilla Firefox and Firefox ESR lies in the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

BLU-IC2/BLU-IC4 Network Controller Data Compromise

The vulnerability of the BLU-IC2 and BLU-IC4 network controllers’ software is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

Amazon Linux 2023 : lz4, lz4-devel, lz4-libs (ALAS2023-2025-1266)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1266 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2025-2435)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Core & HTML component...

CVE-2025-60796

phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting XSS vulnerabilities across various components. User-supplied input from $REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations including sequences.php, indexes.php, admin.ph...

egovframe-common-components security vulnerabilities

egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which stems from a design flaw in symmetric encryption that could lead to an...

egovframe-common-components security vulnerabilities

egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which originates from an unauthenticated file upload endpoint and could lead...

CVE-2025-34336: Unrestricted Upload of File with Dangerous Type

eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/insertImageCk.do image upload endpoints. These controllers accept multipart requests without authentication, pass the...