4266 matches found
EUVD-2024-41280
Malicious code in bioql PyPI...
EUVD-2022-7228
Malicious code in bioql PyPI...
EUVD-2022-4470
Malicious code in bioql PyPI...
EUVD-2025-25574
Malicious code in bioql PyPI...
EUVD-2025-25172
Malicious code in bioql PyPI...
EUVD-2024-49465
Malicious code in bioql PyPI...
EUVD-2025-6386
Malicious code in bioql PyPI...
EUVD-2023-2709
Malicious code in bioql PyPI...
EUVD-2024-29557
Malicious code in bioql PyPI...
EUVD-2025-28585
Malicious code in bioql PyPI...
EUVD-2022-7509
Malicious code in bioql PyPI...
The state of HTTP clients in Spring
This is a new blog post in the Road to GA series, this time exploring the new capabilities of our HTTP clients. This is also a good time to reflect on the state of HTTP clients in Spring, so we will use this opportunity to explain an important announcement: we are officially deprecating...
Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog
Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...
PT-2025-38592
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic versions prior to 22.0.893 Virtual Appliance Host Vasion Print formerly PrinterLogic versions prior to 20.0.2140 Application - macOS/Linux client deployments Description The Vasion Print software is built...
CVE-2025-59039
Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...
CVE-2025-59039 Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...
MAL-2025-46993 Malicious code in @duckdb/node-bindings (npm)
The DuckDB Node.js package @duckdb/node-bindings version 1.3.3 was compromised with malware through a sophisticated phishing attack targeting the DuckDB maintainers. An attacker created a pixel-perfect copy of the npmjs.com website at npmjs.help domain and tricked a maintainer into logging in and...
Access API Moves to Spring Security Access
Five years ago, Spring Security began the journey of modernizing its authorization API. This has paved the way for a number of exciting features like Authorized POJOs, value masking, and, planned for Spring Security 7, Multi-Factor Authentication. This also deprecated the majority of the Access...
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
...
Linux Distros Unpatched Vulnerability : CVE-2023-31417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering was not applied when...