CVE-2025-13643 MongoDB Server may allow queries to be terminated by unauthorized users

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions...

MongoDB -- Missing Authorization

https://jira.mongodb.org/browse/SERVER-103582 reports: A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully...

Security Bulletin: Terraform state versions can be created by users with specific permissions without sufficient write access

Summary Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or is auto-applied. This...

EUVD-2025-198493

Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or auto-applied. This vulnerability,...

CVE-2025-13432

Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or auto-applied. This vulnerability,...

CVE-2025-13432

CVE-2025-13432 affects Terraform Enterprise: state versions can be created by a user with insufficient permissions in a workspace, potentially allowing infrastructure alterations after a plan is approved or auto-applied. Affected versions (per connected sources) include Terraform Enterprise 1.1.0...

CVE-2025-13432 Terraform Enterprise state versions can be created by users with specific permissions without sufficient write access

Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or auto-applied. This vulnerability,...

EUVD-2025-90452

Malicious code in limitedmackerelz3n npm...

EUVD-2025-90454

Malicious code in limitedaspz3n npm...

EUVD-2025-90453

Malicious code in limitedhaddockz3n npm...

Malicious code in limited_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c86950cd25b8f42b20854cf126294d7eca73019d5c695508a703096ab9bb364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78895

Malicious code in limitedharrierz3n npm...

EUVD-2025-78896

Malicious code in limitedaardvarkz3n npm...

Malicious code in limited_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2975092d16904600a82c875a715c022a37c4b52cbe5c8c5f68e33a10d824e131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81376

Malicious code in limitedanteater0xrequest npm...

EUVD-2025-69329

Malicious code in limitedboarz3n npm...

EUVD-2025-63297

Malicious code in limiteddamselflyz3n npm...

EUVD-2025-63298

Malicious code in limitedapez3n npm...

Malicious code in limited_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c52e23068fda4e5775e067d48f79470dbc5672ecff8a5aed450544e066ec25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8449166efad6375e6f2b7378ec780d9be836f322ba6b6d1cdafd641158324d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...