Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

PT-2025-44765

Name of the Vulnerable Software and Affected Versions Raspberry Pi Imager version 1.9.6 Description An issue exists in the OS customization feature of Raspberry Pi Imager. The 'public-key authentication' setting unintentionally re-adds a user's id rsa.pub key from their local Windows machine to t...

Detecting Vulnerabilities from Issue Reports for Internet-Of-Things

Timely identification of issue reports reflecting software vulnerabilities is crucial, particularly for Internet-of-Things IoT where analysis is slower than non-IoT systems. While Machine Learning ML and Large Language Models LLMs detect vulnerability-indicating issues in non-IoT systems, their I...

Machine and Deep Learning for Indoor UWB Jammer Localization

Ultra-wideband UWB localization delivers centimeter-scale accuracy but is vulnerable to jamming attacks, creating security risks for asset tracking and intrusion detection in smart buildings. Although machine learning ML and deep learning DL methods have improved tag localization, localizing...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: logstash-exporter, kube-bench, mockery, ctop, sealed-secrets, newrelic-nri-statsd, php-fpmexporter, kubecolor, dask-gateway, cloud-sql-proxy, controller-gen, kubelet-csr-approver, mods, nats, crane, nova, dbmate, terraform-provider-azuread, trivy-operator, http-echo,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, conjur-cli, db-operator-fips, wavefront-collector-for-kubernetes, kapp-controller-fips, multus-cni-fips, terraform-provider-kubernetes-fips, thanos-operator, octo-sts, gosu, modelmesh-runtime-adapter, kube-arangodb-fips, falcoctl-fips, ko, kpt,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, conjur-cli, db-operator-fips, wavefront-collector-for-kubernetes, kapp-controller-fips, multus-cni-fips, terraform-provider-kubernetes-fips, thanos-operator, octo-sts, gosu, modelmesh-runtime-adapter, kube-arangodb-fips, falcoctl-fips, ko, kpt,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, conjur-cli, db-operator-fips, wavefront-collector-for-kubernetes, kapp-controller-fips, multus-cni-fips, terraform-provider-kubernetes-fips, thanos-operator, octo-sts, gosu, modelmesh-runtime-adapter, kube-arangodb-fips, falcoctl-fips, ko, kpt,...