MAL-2025-1942 Malicious code in sysaid-components-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sysaid-components-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1885 Malicious code in mapbox-demo-components (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mapbox-demo-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1692 Malicious code in @kone-ds/webcomponents-react (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @f2p-mml-frontends/mml-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983731c41dcce79ac1385591adacf0e23cc21f82e4d2bfadff7fb3bb79cf2e2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53384

CVE-2024-53384 affects tsup v8.3.4 with a DOM Clobbering vulnerability that lets an attacker execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components. The CVSS 3.1 vector shows a MEDIUM base score (5.1) with LOCAL attack vector, LOW a...

Malicious code in fb-components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0a156cc9bbfceeb92efaaf503c32f71145adbcafa68aa571a5eb055eea23590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1591 Malicious code in findomestic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a944111d653908b4d57be5f92681aa2954a42a4ddea0169b05c3aca65a7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in findomestic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a944111d653908b4d57be5f92681aa2954a42a4ddea0169b05c3aca65a7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mep-widget-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd0595287736afbcd4a5eb42eee88ad6ac547864009d19dfcb6c2ecc108e526c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1611 Malicious code in mep-widget-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd0595287736afbcd4a5eb42eee88ad6ac547864009d19dfcb6c2ecc108e526c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1587 Malicious code in fb-components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0a156cc9bbfceeb92efaaf503c32f71145adbcafa68aa571a5eb055eea23590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-49701

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Allocate/free queue resource only during probe/remove Currently, the sub-queues and event pool resources are allocated/freed for every CRQ connection event such as reset and LPM. This exposes the driver to a couple...

CVE-2022-49166

In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfsreadinodemount invokes ntfsmallocnofs with zero allocation size. It triggers one BUG in the ntfsmalloc function. Fix this by adding sanity check on ni-attrlistsize...

Recommended update for Maven

This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...

The vulnerability of the software products of the LLC “NPO “MIR” is related to the presence of vulnerabilities in the borrowed components. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software products developed by LLC “NPO ‘MIR’ is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities could allow attackers who operate remotely to compromise the confidentiality, integrity, and accessibility of the...

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

CVE-2025-26598

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...

GHSA-CRQM-PWHX-J97F vulnerabilities

Vulnerabilities for packages: victoriametrics-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-cloudfront, addon-resizer, actions-runner-controller-fips, eck-operator-fips, render-template, metacontroller, eck-operator, prometheus-blackbox-exporter-fips, kor,...