88 matches found
EUVD-2025-23481
Malicious code in bioql PyPI...
Fedora: Security Advisory (FEDORA-2025-24e111e6f1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-d4c9910925)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-48938 affecting package gh for versions less than 2.62.0-9
CVE-2025-48938 affecting package gh for versions less than 2.62.0-9. A patched version of the package is available...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
SUSE CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
UBUNTU-CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
Fedora: Security Advisory (FEDORA-2025-164ac0d01f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in reacts-gh (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...
MAL-2025-4577 Malicious code in reacts-gh (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...
Fedora: Security Advisory (FEDORA-2024-3723af2358)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-53858 affecting package gh for versions less than 2.13.0-24
CVE-2024-53858 affecting package gh for versions less than 2.13.0-24. A patched version of the package is available...
CVE-2025-22872 affecting package gh for versions less than 2.62.0-8
CVE-2025-22872 affecting package gh for versions less than 2.62.0-8. A patched version of the package is available...
AZL-60542 CVE-2025-22872 affecting package gh for versions less than 2.62.0-8
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2025-25204 affecting package gh for versions less than 2.62.0-6
CVE-2025-25204 affecting package gh for versions less than 2.62.0-6. A patched version of the package is available...
CVE-2025-27144 affecting package gh for versions less than 2.62.0-7
CVE-2025-27144 affecting package gh for versions less than 2.62.0-7. A patched version of the package is available...
AZL-57353 CVE-2025-22869 affecting package gh for versions less than 2.62.0-7
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...
