OPENSUSE-SU-2025:20115-1 Security update for pnpm

This update for pnpm fixes the following issues: Changes in pnpm: - update to 10.22.0: Minor Changes - Added support for trustPolicyExclude 10164. You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy...

EUVD-2013-5547

Malware in sbrugna...

EUVD-2016-7130

Malware in sbrugna...

EUVD-2011-3589

Malware in sbrugna...

EUVD-2021-14589

Malware in sbrugna...

EUVD-2005-3320

Malware in sbrugna...

EUVD-2011-3590

Malware in sbrugna...

EUVD-2016-6363

Malware in sbrugna...

EUVD-2019-0484

Malware in sbrugna...

EUVD-2019-0483

Malware in sbrugna...

EUVD-2009-0873

Malware in sbrugna...

EUVD-2015-3248

Malware in sbrugna...

EUVD-2016-7131

Malware in sbrugna...

EUVD-2021-31545

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-6197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with...

Linux Distros Unpatched Vulnerability : CVE-2016-6198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows...

GHSA-3J8R-JF9W-5CMH LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, before version 0.5.2 specifically in version 0.12.27 of llama-index, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as...

PYSEC-2025-252

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...