Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was observed in a previous version of the kernel commit ee2653bbe89d, “iommu/vt-d: Remove domain and devinfo mempool” when there was a failur...

MARS: Malware Analysis with Rule-Based Scoring of LLM Claims

Large language models can triage malware through direct verdicts or behavioral claims scored by an external policy. We present MARS, a malware triage framework, and compare direct classification with single-pass claim scoring using the same evidence collector and identical static evidence bundles...

Malicious code in @aubea/mars (npm)

Source: amazon-inspector bdc44d9f879ce07c857e122c24664d6ae0445cb55aceeeb12c898d65898f7617 When invoked as its CLI npx @aubea/mars, the package opens a WebSocket connection to a hardcoded third-party relay at wss://cho100.cn/mars-relay and forwards messages received from a paired remote endpoint...

Malicious code in mars-rover_alvin (RubyGems)

--- Credit: OpenSSF source...

mars-gym (0.1.0) potentially affected by CVE-2026-10804 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2026-10804 Source advisory: OSV:GHSA-VQWP-45WM-R9R5...

mars-gym (0.1.0) potentially affected by CVE-2026-10804 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2026-10804 Source advisory: OSV:PYSEC-2026-212...

com.github.yuyenews:mars-cloud-core (>=3.0.6, <=3.0.7), com.github.yuyenews:mars-cloud-feign (>=3.0.6, <=3.0.7) +12 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.49)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.yuyenews:mars-cloud-core =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9,...

com.github.yuyenews:mars-cloud-core (>=3.0.6, <=3.0.7), com.github.yuyenews:mars-cloud-feign (>=3.0.6, <=3.0.7) +12 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.49)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.yuyenews:mars-cloud-core =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9,...

com.github.yuyenews:mars-mvc (>=3.0.12, <=3.0.19), com.github.yuyenews:mars-server (>=3.0.12, <=3.0.19) +24 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.yuyenews:mars-mvc =3.0.12, =3.0.12, =3.0.12, =3.0.12, =3.0.12,...

mars-gym (0.1.0) potentially affected by CVE-2026-33682 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2026-33682 Source advisory: OSV:PYSEC-2026-2285...

mars-gym (0.1.0) potentially affected by CVE-2026-33682 via streamlit (0.62.0)

streamlit PYPI version 0.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - mars-gym 0.1.0 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005632 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was seen...

apache-liminal (>=0.0.3rc1, <=0.0.5), apache-liminal-test-spark (0.0.0) +7 more potentially affected by CVE-2025-69872 via diskcache (3.1.1)

diskcache PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - apache-liminal =0.0.3rc1, =0.0.0, =7.0.0a1, =1.2.0, =4.1.0, =6.0.0, =0.2.5, =0.2.7 - mars-gym 0.1.0 Source cves: CVE-2025-69872 Source advisor...

CVE-1999-0774

Buffer overflows in Mars NetWare Emulation NWE, marsnwe package via long directory names...

CVE-2025-59387

An SQL injection vulnerability has been reported to affect MARS Multi-Application Recovery Service. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS Multi-Application Recovery...

CVE-2025-59387

An SQL injection vulnerability has been reported to affect MARS Multi-Application Recovery Service. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS Multi-Application Recovery...

CVE-2025-59387 MARS (Multi-Application Recovery Service)

An SQL injection vulnerability has been reported to affect MARS Multi-Application Recovery Service. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS Multi-Application Recovery...

PT-2026-1099

Name of the Vulnerable Software and Affected Versions MARS Multi-Application Recovery Service versions prior to 1.2.1.1686 Description An SQL injection issue affects MARS Multi-Application Recovery Service. Successful exploitation could allow remote attackers to execute unauthorized code or...

CVE-2025-59387: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability has been reported to affect MARS Multi-Application Recovery Service. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS Multi-Application Recovery...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2025-55039 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2025-55039...