MAL-2025-1434 Malicious code in pionex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140b5ef89db32e0c5bc1f860989081e6cdb3bcc488bafdb1b3e7e78ee78d29dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14809-1 curl-8.12.1-1.1 on GA media

These are all security issues fixed in the curl-8.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1355 Malicious code in uzx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 480bcafaaaad658c3b61f5335846df6701c8e8eda0856c45fcd0c1c55babfa1d Any computer that has this package install...

OPENSUSE-SU-2025:14768-1 grafana-11.5.1-1.1 on GA media

These are all security issues fixed in the grafana-11.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14765-1 netty-4.1.118-1.1 on GA media

These are all security issues fixed in the netty-4.1.118-1.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1188)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14756-1 libtasn1-6-32bit-4.20.0-1.1 on GA media

These are all security issues fixed in the libtasn1-6-32bit-4.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14759-1 python312-3.12.9-1.1 on GA media

These are all security issues fixed in the python312-3.12.9-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, skaffold, chartmuseum-fips, docker-credential-acr-env-fips, nerdctl, whereabouts-fips, authservice, rancher-loglevel, src-fingerprint, zarf, caddy, ksops, mongo-tools, helm, cass-operator-fips,...

OPENSUSE-SU-2025:14741-1 ruby3.4-rubygem-http-cookie-1.0.8-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-http-cookie-1.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1077)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14727-1 firefox-esr-128.7.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1224 Malicious code in moonpay-widget (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f54359edaa7e13a4f8202996b5622e409f348903724d1243f86b503193bb17c Any computer that has this package installed or running should be considered...

MAL-2025-1202 Malicious code in @devstack-angular/jdai (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac06a10b7b09cb556a876d7b76ede19361cf8c7fb2b92fe70daf3f55cc180dd2 Any computer that has this package installed or running should be considered...

Malicious code in baileys-dgxeon (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1095 Malicious code in cschokidar-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63b18ad7ad67180b5b30bfcc6fbd86867deceb52cc2496442410bbd40f278241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Debian: Security Advisory (DLA-4032-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56728 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

MAL-2025-283 Malicious code in calypso-eslint-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...