Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

Malicious code in xi-secure-lambda-uglify-authorize (npm)

The package xi-secure-lambda-uglify-authorize was found to contain malicious code...

Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

Malicious code in @epc-infra/lambda-utils (npm)

The package @epc-infra/lambda-utils was found to contain malicious code...

MAL-2025-24939 Malicious code in lambda-fast-yaml-quick-virtualize (npm)

The package lambda-fast-yaml-quick-virtualize was found to contain malicious code...

MAL-2025-19107 Malicious code in ebos_lambda_utils (npm)

The package eboslambdautils was found to contain malicious code...

Malicious code in scale-route-bash-lambda-class (npm)

The package scale-route-bash-lambda-class was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-38454 Malicious code in virtualize-balance-lambda-pipe-validate (npm)

The package virtualize-balance-lambda-pipe-validate was found to contain malicious code...

MAL-2025-7839 Malicious code in @epc-infra/lambda-utils (npm)

The package @epc-infra/lambda-utils was found to contain malicious code...

MAL-2025-18144 Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-39766 Malicious code in xi-secure-lambda-uglify-authorize (npm)

The package xi-secure-lambda-uglify-authorize was found to contain malicious code...

CVE-2024-24753

Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two headers having the same key but different values only the latest one is kept. If an application relie...

CVE-2024-24754

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and its content...

CVE-2024-24752

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and for each whic...

CVE-2019-10777

In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName"...

@mrmtech/splice-lambda (>=0.1.0, <=4.0.3) potentially affected by unknown CVE via @sentry/aws-serverless (>=8.26.0, <=8.30.0)

@sentry/aws-serverless NPM version =8.26.0, =0.1.0, =4.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

AWS VDP: A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.

The aws-lambda-ecs-run-task application created a function with a role that had excessive permissions, including the AdministratorAccess policy. This allowed for potential privilege escalation by an attacker...

OPENSUSE-SU-2024:0384-1 Security update for zabbix

This update for zabbix fixes the following issues: Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and Oracle by ODBC template Agent Templat...

The Future of Serverless Security in 2025: From Logs to Runtime Protection

Serverless environments, leveraging services such as AWS Lambda, offer incredible benefits in terms of scalability, efficiency, and reduced operational overhead. However, securing these environments is extremely challenging. The core of current serverless security practices often revolves around...