Malicious code in @crimson-team/sst-shared-components (npm)

The package @crimson-team/sst-shared-components was found to contain malicious code...

Malicious code in @azl-react-components/svgs (npm)

The package @azl-react-components/svgs was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-9591 Malicious code in @uxbrand-components/logo-widget (npm)

The package @uxbrand-components/logo-widget was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2023-5342

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

CVE-2023-5342

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection due to the unsafe implementation of a dynamic Function constructor. An attacker can execute arbitrary JavaScript code on the server by sending a crafted POST request...

Command Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Command Injection via the CustomMCP class. An attacker can gain unauthorized remote access and execute arbitrary operating system commands by sending crafted requests over the network. This i...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2025-8943 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2025-8943 Source advisory: SNYK:JS-FLOWISECOMPONENTS-11953677...

PT-2025-33478 · Fedora · Shim

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired, potentially allowing the loading of old or invalid signed boot components...

CVE-2023-5342: Use of a Key Past its Expiration Date

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

Security Bulletin: Multiple vulnerabilities in IBM Controller

Summary There are vulnerabilities in Open-Source Software OSS components used by IBM Controller. This Security Bulletin relates only to the direct usage of third-party components by IBM Controller and not any nested dependencies within the product. Vulnerability Details CVEID:CVE-2015-6420...

PT-2025-32984

Name of the Vulnerable Software and Affected Versions AMPHP affected versions not specified Apache Tomcat affected versions not specified Eclipse Foundation affected versions not specified F5 affected versions not specified Fastly affected versions not specified gRPC affected versions not specifi...

ROS-20250812-04

Vulnerability of decodeComponents function of decode-uri-component URI decoder is related to insufficient input data validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

Siemens SINEC OS

SUMMARY SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...

Siemens Third-Party Components in SINEC OS

SUMMARY SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...

BIT-LIBPHP-2020-7071 FILTER_VALIDATE_URL accepts URLs with invalid userinfo

In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong dat...

Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2008-1530 DESCRIPTION: GnuPG gpg 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: step, sbom-scorecard, gomplate, atlantis, neuvector-dbgen, rancher-fleet, opentelemetry-collector, kpt, hugo-extended, helm-push, dex, k8ssandra-client, yunikorn-k8shim, azure-workload-identity-webhook, k8s-device-plugin, k8sgateway, cluster-api-helm-controller,...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: gotenberg, contour, cyberark-secrets-provider-for-k8s, step-kms-plugin-fips, mcp-grafana-fips, karma, request-1279-14, fq, prometheus-statsd-exporter-fips, rancher-webhook-fips, flux-image-reflector-controller, teleport, sbom-scorecard, cortex-fips, velero, packer,...

CVE-2025-8745

A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.ricepo.app. The manipulation leads to improper export of android application components. An...