GO-2025-3870 Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence...

GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...

GO-2025-3874 Komari vulnerable to Cross-site WebSocket Hijacking in github.com/komari-monitor/komari

Komari vulnerable to Cross-site WebSocket Hijacking in github.com/komari-monitor/komari...

Intel® Xeon® 6 Processor Firmware Advisory

Summary: Potential security vulnerabilities for some Intel® Xeon® 6 Processors when using Intel® Software Guard Extensions Intel® SGX or Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities...

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign By Pham Duy Phuc and Alex Lanstein · August 18, 2025 The Trellix Advanced Research Center uncovered a sophisticated espionage operation targeting diplomatic missions across several regions in South Korea during...

CVE-2025-55192

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

GHSA-GPMG-4X4G-MR5R

creationtimestamp| type| source ---|---|--- 2025-08-16 06:40:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lwir5k52342l...

GHSA-XRG4-QP5W-2C3W

creationtimestamp| type| source ---|---|--- 2025-08-15 15:53:30+00:00| seen| https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lwh7lwnkcrv2 2025-08-15 15:53:34+00:00| seen| https://infosec.exchange/users/raptor/statuses/115033584397389086...

GHSA-9X9C-GHC5-JHW9

creationtimestamp| type| source ---|---|--- 2025-08-15 15:34:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033509822272775...

GHSA-76R7-HHXJ-R776 vulnerabilities

Vulnerabilities for packages: ruby3.4-activerecord, ruby3.3-activerecord, ruby3.2-activerecord...

GHSA-76R7-HHXJ-R776 vulnerabilities

Vulnerabilities for packages: ruby3.2-activerecord, ruby3.3-activerecord, ruby3.4-activerecord...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: cilium-cli, harbor, chart-testing-fips, nova, k9s, consul-k8s-fips, kots, chartmuseum-fips, kuma, eksctl, linkerd2-fips, rancher-fleet, cert-manager-cmctl-fips, istio, headlamp, rancher-fleet-fips, flux-source-controller-fips, flux-source-controller, flux,...

Malicious code in release-to-github (npm)

The package release-to-github was found to contain malicious code...

Malicious code in github-react-components (npm)

The package github-react-components was found to contain malicious code...

MAL-2025-32058 Malicious code in release-to-github (npm)

The package release-to-github was found to contain malicious code...

MAL-2025-21482 Malicious code in github-react-components (npm)

The package github-react-components was found to contain malicious code...

CVE-2025-53773

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...

CVE-2025-55192

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

GHSA-XCCG-43HX-C846

creationtimestamp| type| source ---|---|--- 2025-08-14 17:02:59+00:00| seen| Telegram/2aiCe15jUeeRDLOadJeMH7VKDKBtBq9vNFQ5Yzu3yuNw...

CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...