Malicious code in example-icrc35-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7e6839f13b54dc75f2b851ec1c1e78a9bbf4591f438a2053c99658e5f60189 The package example-icrc35-shared-library was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in create-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242fbf21e70f13fac07ad9415ae43d91bc17823a931c07c5143ae7f7119a2b24 The package create-response was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49095 Malicious code in create-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242fbf21e70f13fac07ad9415ae43d91bc17823a931c07c5143ae7f7119a2b24 The package create-response was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in int_affirm_controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c121a8e42740e77bf8fbd68555baf163e58d04b145e5ad42bbc0feb3a087628 The package intaffirmcontrollers was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49097 Malicious code in int_affirm_controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c121a8e42740e77bf8fbd68555baf163e58d04b145e5ad42bbc0feb3a087628 The package intaffirmcontrollers was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in app_storefront_core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d146e3723013cdb936cc74fc9a48a5aa197031f136e710ce28e0ceda08d8399d The package appstorefrontcore was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49094 Malicious code in app_storefront_core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d146e3723013cdb936cc74fc9a48a5aa197031f136e710ce28e0ceda08d8399d The package appstorefrontcore was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 42 Update: bind-9.18.41-1.fc42

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 41 Update: bind-9.18.41-1.fc41

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

MAL-2025-49099 Malicious code in @raux/ra-react-big-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2a212e56b9bc45f8e1a5ba0e12813f0d333c9d77c3d94b1ec81b8bdd42655580 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

Malicious code in @raux/ra-react-big-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2a212e56b9bc45f8e1a5ba0e12813f0d333c9d77c3d94b1ec81b8bdd42655580 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

Malicious code in dynamic-import-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e6f301178847664c047f34b5ce64b443f6162b3a0c5113fed22a3a9d1bfcd793 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

Malicious code in @dealmgmt/grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 3f1e7bb02af2f24d6a057db349128269908eb7e771722c7cf8aa637d3974058a This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

MAL-2025-49100 Malicious code in dynamic-import-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e6f301178847664c047f34b5ce64b443f6162b3a0c5113fed22a3a9d1bfcd793 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

MAL-2025-49098 Malicious code in @dealmgmt/grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 3f1e7bb02af2f24d6a057db349128269908eb7e771722c7cf8aa637d3974058a This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

EUVD-2025-36739

The ParseAddress function constructeds domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

PT-2025-44500

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.3 Description Nagios XI, under certain circumstances, reveals the server's Active Directory AD or Lightweight Directory Access Protocol LDAP authentication token to a user who is already authenticated. This...

PT-2025-44440

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.119 Liferay DXP versions 2023.Q3.1 through 2023.Q4.10 Liferay DXP versions 2024.Q1.1 through 2024.Q1.5 Liferay Portal versions 7.4 GA through update 92 Older unsupported versions Description The...

Fedora: Security Advisory (FEDORA-2025-224e937c18)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...