MAL-2025-9992 Malicious code in @zalastax/nolb-_ext- (npm)

The package @zalastax/nolb-ext- was found to contain malicious code...

MAL-2025-26787 Malicious code in mozik-ext-bitbucket (npm)

The package mozik-ext-bitbucket was found to contain malicious code...

Malicious code in @zalastax/nolb-_ext- (npm)

The package @zalastax/nolb-ext- was found to contain malicious code...

Malicious code in h1-cli-ext-root-auth (npm)

The package h1-cli-ext-root-auth was found to contain malicious code...

Malicious code in h1-cli-ext-storage-vault (npm)

The package h1-cli-ext-storage-vault was found to contain malicious code...

MAL-2025-26779 Malicious code in mozaik-ext-git (npm)

The package mozaik-ext-git was found to contain malicious code...

MAL-2025-22079 Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

Malicious code in mozik-ext-bitbucket (npm)

The package mozik-ext-bitbucket was found to contain malicious code...

MAL-2025-22080 Malicious code in h1-cli-ext-root-auth (npm)

The package h1-cli-ext-root-auth was found to contain malicious code...

MAL-2025-11396 Malicious code in @zalastax/nolb-ext_ (npm)

The package @zalastax/nolb-ext was found to contain malicious code...

MAL-2025-20103 Malicious code in ext-zip (npm)

The package ext-zip was found to contain malicious code...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1468 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-ext-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An...

com.github.lansheng228:aws-crypto (1.0.3), com.github.yadickson:autocert (>=2.0.0, <=2.0.2) +53 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15to18 (>=1.64, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk15to18 MAVEN version =1.64, =2.0.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.1, =12.31.0, =v9.6.9-m1, =v9.6.6, =v9.6.6, =v9.6.6, =v9.6.6, =9.6.10 - net.risesoft:risenet-y9boot-api-feignclient-storage 9.6.10 and more Source cves: CVE-2025-8916 Source advisory:...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789696...

cn.jarkata:jarkata-encrypt (1.0.0), cn.ponfee:commons-core (>=1.1, <=1.4) +490 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50,...

kernel: ext4: fix off-by-one error in do_split

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in dosplit Syzkaller detected a use-after-free issue in ext4insertdentry that was caused by out-of-bounds access due to incorrect splitting in dosplit. BUG: KASAN: use-after-free in...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1993)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : RDMA/core: Silence oversized kvmalloc warningCVE-2025-37867 igb: revert rtnllock that causes deadlockCVE-2023-53060 bnxten: Avoid order-5 memory...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-ext-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by...