CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4

CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4. A patched version of the package is available...

EUVD-2019-19112

Malware in sbrugna...

EUVD-2021-22721

Malware in sbrugna...

EUVD-2021-13952

Malware in sbrugna...

EUVD-2020-23546

Malware in sbrugna...

EUVD-2025-10313

Malicious code in bioql PyPI...

EUVD-2025-9768

Malicious code in bioql PyPI...

EUVD-2025-4684

Malicious code in bioql PyPI...

EUVD-2025-4694

Malicious code in bioql PyPI...

EUVD-2021-33528

Malicious code in bioql PyPI...

EUVD-2021-33529

Malicious code in bioql PyPI...

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3. A patched version of the package is available...

CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5

CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5. A patched version of the package is available...

AZL-67608 CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...

AZL-67617 CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

...

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

...

Linux Distros Unpatched Vulnerability : CVE-2024-23722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crash...

AZL-66048 CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3

The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. In versions 2.4.0 and below, iwasm uses --addr-pool with an IPv4 address that lacks a subnet mask, allowing the system to...

AZL-66045 CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5

The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. In versions 2.4.0 and below, iwasm uses --addr-pool with an IPv4 address that lacks a subnet mask, allowing the system to...