Malicious code in next-preconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6c913ab58ceadfc5aa3fc495351d79f6b78e5af57e7256ed73de89043e91e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview next-preconfig is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

tsify-next is unmaintained, use tsify instead

The tsify-next crate is not maintained any more; use tsify instead...

dji-log-parser (>=0.5.0 <=0.5.7) potentially affected by unknown CVE via tsify-next (=0.5.6)

tsify-next CARGO version =0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...

RUSTSEC-2025-0048 tsify-next is unmaintained, use tsify instead

The tsify-next crate is not maintained any more; use tsify instead...

PT-2025-33039 · Crates.Io · Tsify-Next

The tsify-next crate is not maintained any more; use tsify instead...

Malicious code in next-minimal-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed5e4b150f949434786803be46122fa169432748424017c770c2582c50b6558 The OpenSSF Package Analysis project identified 'next-minimal-server'...

MAL-2025-6260 Malicious code in next-minimal-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed5e4b150f949434786803be46122fa169432748424017c770c2582c50b6558 The OpenSSF Package Analysis project identified 'next-minimal-server'...

Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6123 Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-52984

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device. When static route points to a reject next hop and a gNMI query is...

Malicious code in with-next-intl (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d19de7a1f0382187b4331c426d9c88dddd8734112cac8bfd611c4edadf922ad Any computer that has this package installed or running should be considered...

MAL-2025-5529 Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-28938 · Ооо "Юзергейт" · Usergate Next-Generation Firewall

Уязвимость страницы блокировки межсетевого экрана UserGate Next-Generation Firewall NGFW связана с недостаточной проверкой входных данных. Эксплуатация уязвимости, может позволить нарушителю, выполнить произвольный код при переходе по специально сформированной ссылке...

Server Side Request Forgery (SSRF)

@opennextjs/cloudflare is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to an unimplemented feature in the Cloudflare adapter for Open Next, allows unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...

Notepad Next 缓冲区错误漏洞

Notepad Next is a notepad program by dail8859 individual developer. A buffer error vulnerability exists in Notepad Next v0.11 and earlier versions, which stems from an out-of-bounds read in the lparser.C file, which may result in an over-read of the heap buffer...

Notepad Next 缓冲区错误漏洞

Notepad Next is a notepad program by dail8859 individual developer. A buffer error vulnerability exists in Notepad Next v0.11 and earlier versions, which stems from out-of-bounds writes to the ldebug.C and lvm.C files...

Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for python39

This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517:...

CVE-2025-6087

A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...