CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

CVE-2025-55192

HomeAssistant-Tapo-Control exposes a code injection vulnerability in its GitHub Actions workflow .github/workflows/issues.yml, prior to commit 2a3b80f. The workflow directly inserts user-controlled content from the issue body (github.event.issue.body) into a Bash conditional without proper saniti...

CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

Malicious Package

Overview github.com/ordinarymea/tnsrids is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...

GHSA-6MM5-R7WC-H7PM vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-6Q9Q-G6RV-XHJC vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-C9RV-F9QQ-JJVF vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-F8W7-HH6G-979X vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-Q9RX-VPRP-MMRF vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-522C-XXVJ-5JHW vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-25-openj9, openjdk-11-openj9...

GHSA-X58F-J988-8PPF vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-J474-59J6-7C6R vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FMM9-3JQX-2M93 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-93P8-MVM4-C85W vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-522C-XXVJ-5JHW vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-GCQ6-QG3M-6M3G vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-JF28-JJ52-6JMF vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-VP36-CHC4-89VW vulnerabilities

Vulnerabilities for packages: openjdk...

PT-2025-33340 · Unknown +2 · Homeassistant-Tapo-Control +3

Name of the Vulnerable Software and Affected Versions: HomeAssistant-Tapo-Control versions prior to commit 2a3b80f Description: HomeAssistant-Tapo-Control, a component offering control for Tapo cameras within Home Assistant, contained a code injection vulnerability in the GitHub Actions workflow...

Fedora 42 : perl-Authen-SASL (2025-fddaaaf9f0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fddaaaf9f0 advisory. 2.1900 Fixed - CVE-2025-40918 Insecure source of randomness, required addition of dependency on Crypt::URandom Changed - Modules Authen::SASL::Perl::CRAMMD5,...