MAL-2025-48576 Malicious code in mender-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1362b58dc19a9ff29ea00a5ac5b634c3b6aa179242d6cfd3daf6efedfac50a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48587 Malicious code in useradm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24e5e47f716e1c63744a02d8c2704930bd59cb6b296800dc847bd394dc381cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48577 Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db45b762045779c0566cc967511852ceac9bebb9a2a09ceed1eda3c44c3e296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tenantadm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ce8c0c0c24aa09e7e543bac2dca10d2642ad336d071e8bc5ffac9be251ff10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1362b58dc19a9ff29ea00a5ac5b634c3b6aa179242d6cfd3daf6efedfac50a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48571 Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48569 Malicious code in mender-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de3cf7258b50c3fd2233ed366fed6714e44da530255103d045c71406b2ea081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-configure-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e954036412bb11454b4f5fb99bb6ac9b672d9b5542bdbaf870a9a0e20b444d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47579a45c1a2efddc746cda2163ebd2588c6d62f3b6349ae9ae21f43327b9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48575 Malicious code in mender-flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47579a45c1a2efddc746cda2163ebd2588c6d62f3b6349ae9ae21f43327b9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48570 Malicious code in mender-conductor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa35f37c40538fc027dc3f86e83c914f7285a8968a9811e5bbc8a5fc5b863da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48560 Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deviceconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c1a3984e1cb71a8f8426b3963787a49a096ce770bcabde9e63ca51fa5007e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48561 Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48565 Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Essbase Multiple Vulnerabilities (October 2025 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2025 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Security and Provisioning Bouncy Castle Java Library. The supported version that is...

CVE-2025-62617

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...