git security update

An update is available for git. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git is a distributed revision control system with a decentralized architecture. A...

RLSA-2025:11462 Important: git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...

RockyLinux 9 : git (RLSA-2025:11462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11462 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...

EUVD-2024-51050

Malicious code in bioql PyPI...

EUVD-2025-7018

Malicious code in bioql PyPI...

EUVD-2024-50584

Malicious code in bioql PyPI...

EUVD-2025-13899

Malicious code in bioql PyPI...

EUVD-2024-34269

Malicious code in bioql PyPI...

EUVD-2024-39303

Malicious code in bioql PyPI...

EUVD-2022-0753

Malicious code in bioql PyPI...

EUVD-2022-44222

Malicious code in bioql PyPI...

EUVD-2024-34270

Malicious code in bioql PyPI...

EUVD-2022-44223

Malicious code in bioql PyPI...

EUVD-2025-17638

Malicious code in bioql PyPI...

EUVD-2025-30264

Malicious code in bioql PyPI...

EUVD-2023-35455

Malicious code in bioql PyPI...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

USN-7782-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled opening a file to write. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service CVE-2025-7462 It was discovered that Ghostscript incorrectly handled writing certain files. An attacker could...

SUSE CVE-2025-59342

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a...

The vulnerability of the open-source Kea DHCP server arises from improper external management of the filename or path, allowing attackers to gain write access to arbitrary files.

The vulnerability of the open-source Kea DHCP server is related to incorrect external management of the file name or path. Exploiting this vulnerability can allow an attacker to gain write access to arbitrary files...