MAL-2025-190751 Malicious code in @posthog/plugin-contrib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd017c0dad0f7c8771c40b6fbc9308cf19b77a704f62856696156fb3cf156b The package @posthog/plugin-contrib was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198757

Malicious code in @posthog/plugin-contrib npm...

TencentOS Server 4: grafana (TSSA-2024:0907)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0907 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, amazon-cloudwatch-agent, cluster-api-aws-controller, grafana-alloy, splunk-otel-collector, argo-events, opentelemetry-collector-contrib, bento, sqlexporter...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cluster-api-aws-controller-fips, argo-events-fips, splunk-otel-collector-fips, splunk-otel-collector, vault-fips, amazon-cloudwatch-agent, argo-events, cluster-api-aws-controller, dapr-fips, vault, jitsucom-bulker,...

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

CVE-2025-10930 Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

EUVD-2025-33788

Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...

CVE-2025-9554 Owl Carousel 2 - Critical - Unsupported - SA-CONTRIB-2025-104

Vulnerability in Drupal Owl Carousel 2.This issue affects Owl Carousel 2:...

CVE-2025-9552 Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102

Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...

CVE-2025-9552 Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102

Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...

CVE-2025-9552

The Drupal Synchronize composer.json With Contrib Modules module (all versions) is affected by a security vulnerability stemming from an issue when synchronizing composer.json with contributed modules. The vulnerability is characterized as an Authenticated Other Vulnerability Type . Due to these ...

PT-2025-41620

Name of the Vulnerable Software and Affected Versions Drupal Synchronize composer.Json With Contrib Modules versions . Description A flaw exists in Drupal Synchronize composer.Json With Contrib Modules. The specific nature of the issue is not detailed in the provided information. Recommendations ...

CVE-2025-9552: Undefined Security Weakness

Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...

EUVD-2021-13309

Malware in sbrugna...

EUVD-2024-53524

Malicious code in bioql PyPI...

EUVD-2023-2802

Malicious code in bioql PyPI...

sinatra

This is the official repository for the Sinatra web framework. It is a DSL Domain Specific Language for web development, allowing developers to create web applications in a concise and elegant way. The repository contains the core code for Sinatra, as well as various plugins and extensions. The...

Linux Distros Unpatched Vulnerability : CVE-2024-35231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to...

Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...