11044 matches found
@accounter/client (>=0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, <=0.0.4-alpha-20250326170142-96e7a3c4676b50d865f58a42522ed17e4da19ca8), @adithya07/nextn (0.1.0) +28 more potentially affected by CVE-2025-30218 via next (15.2.3)
next NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @accounter/client =0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, =0.1.0, =0.1.8, =0.0.2, =0.1.10, =1.0.0, =0.1.0, =0.1.39, =0.1.4...
Ubuntu: Security Advisory (USN-7384-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-30210: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...
Malware in @takamol/ets-react-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @takamol/ets-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f82dcc5edf4748a4186895186924ee28e0f55fe782fe6b7e4d4f6ffe895195d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu: Security Advisory (USN-7383-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7383-2: Linux kernel (Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...
@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +60 more potentially affected by CVE-2025-27793 via vega-functions (>=5.5.0, <=5.16.0)
vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =0.5.0, =1.0.7, =0.1.4, =0.6.2, =0.6.4 and more Source cves: CVE-2025-27793 Source advisory: OSV:GHSA-963H-3V39-3PQF...
EFI/unaccepted kernel components of DoS
The vulnerability of the listdel function in efi/unaccepted kernel components of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...
container-tools:ol8 security update
aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed references Orabug: 33473101 Alex Burmashev - Adjust registries.conf Nikita Gerasimov - remove references to RedHat registry Nikita Gerasimov 2:1-82 - update vendored components -...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller-fips, crossplane, seaweedfs, tkn, opentelemetry-collector-contrib, harbor-registry, sops, amazon-cloudwatch-agent-operator, opentelemetry-operator-fips, cortex-fips, pulumi-kubernetes-operator, kyverno-policy-reporter-ui, cilium-fips,...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2025-1474 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2025-1474 Source advisory: OSV:GHSA-4RJ2-9GCX-5QHX...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2025-0453 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2025-0453 Source advisory: OSV:GHSA-49M6-VRR9-2CQM...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-8859 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-8859 Source advisory: OSV:GHSA-4RQF-8PFM-P36R...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-6838 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-6838 Source advisory: OSV:GHSA-Q3GW-8236-5JW4...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2025-1474 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2025-1474 Source advisory: OSV:PYSEC-2025-17...
Malware in messaging-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-50629
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors...
Malware in @idme-components/component-utilities
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...