630004 matches found
Malicious code in faiss-cpu-avx512 (PyPI)
[email protected] through 1.9.7 on PyPI impersonates faiss-cpu and ships no FAISS code: faisscpuavx512/init.py fetchnative downloads an xz-compressed binary from https://files.catbox.moe/ ffoa50.xz in 1.9.0 to 1.9.3, 0oreqo.xz in 1.9.4, vwfr94.xz in 1.9.5, 3l3x0v.xz in 1.9.6, weu5u2.xz in...
[SECURITY] Fedora 44 Update: PackageKit-1.4.0-1.fc44
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 44 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc44
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
Malicious code in chroma-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...
CLSA-2026-1789285864 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 4 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.5...
GHSA-GG4H-3HG2-GRPC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, thingsboard...
[SECURITY] Fedora 45 Update: PackageKit-1.4.0-1.fc45
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
Python Import As an Execution Boundary: An Empirical Study of Bugs, Vulnerabilities, and Analysis Gaps
Python import does more than resolve dependencies: it executes code during module and package initialization. This behavior can trigger failures, load dynamic or native code, access resources, or change security-sensitive state before an application calls a package API. Prior work studies package...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CVE-2026-90651
Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...
CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)
TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...
Malicious code in id79-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
CLSA-2026-1789219285 TuxCare security update for 123 packages (4 CVEs)
TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001...
GHSA-8XX6-HGC6-GC2M vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
CVE-2026-84380 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
CVE-2026-84382 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...
GHSA-PF96-P4FJ-6566 vulnerabilities
Vulnerabilities for packages: py3-httpx2, lmcache-cuda-13.0...