Malicious code in gacrux-promise-vega-umbriel (npm)

The package gacrux-promise-vega-umbriel was found to contain malicious code...

Malicious code in promise-mineralogy-dagda-winston (npm)

The package promise-mineralogy-dagda-winston was found to contain malicious code...

Malicious code in permission-rain-promise-orchestrate-psi (npm)

The package permission-rain-promise-orchestrate-psi was found to contain malicious code...

Malicious code in promise-stratosphere-prettier-plugin-markdown-proxima (npm)

The package promise-stratosphere-prettier-plugin-markdown-proxima was found to contain malicious code...

Malicious code in promise-vega-react-bootstrap-blueshift (npm)

The package promise-vega-react-bootstrap-blueshift was found to contain malicious code...

Malicious code in zenith-promise-jovian-solarnebula (npm)

The package zenith-promise-jovian-solarnebula was found to contain malicious code...

MAL-2025-30732 Malicious code in promise-element-ui-relay-json (npm)

The package promise-element-ui-relay-json was found to contain malicious code...

MAL-2025-30736 Malicious code in promise-query-semantic-release-cosmochemistry (npm)

The package promise-query-semantic-release-cosmochemistry was found to contain malicious code...

MAL-2025-23856 Malicious code in jones-promise (npm)

The package jones-promise was found to contain malicious code...

MAL-2025-23315 Malicious code in ionosphere-promise-vuepress-spectron-webdriver (npm)

The package ionosphere-promise-vuepress-spectron-webdriver was found to contain malicious code...

MAL-2025-30738 Malicious code in promise-vega-react-bootstrap-blueshift (npm)

The package promise-vega-react-bootstrap-blueshift was found to contain malicious code...

MAL-2025-30731 Malicious code in promise-cron-key-sudo-analyze (npm)

The package promise-cron-key-sudo-analyze was found to contain malicious code...

MAL-2025-13365 Malicious code in @zalastax/nolb-promise- (npm)

The package @zalastax/nolb-promise- was found to contain malicious code...

RLSA-2025:8060 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 For more details about...

SQL Injection

pg-promise is vulnerable to SQL Injection. The vulnerability is due to improper handling of negative numbers, which allows an attacker to manipulate SQL queries by injecting malicious input...

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker was able to perform out-of-bounds read or write operations on a JavaScript Promise object. This vulnerability has been fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

GHSA-FF9H-848C-4XFJ pg-promise SQL Injection vulnerability

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

@0x18b2ee/parse-server (>=3.10.1 <=3.11.0), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939 <=0.0.64) +412 more potentially affected by CVE-2025-29744 via pg-promise (>=0.9.8 <=11.5.4)

pg-promise NPM version =0.9.8, =3.10.1, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.0, =1.1.2, =0.0.2, =0.0.3, =0.1.1, =9.3.8, =2.13.15, =2.0.0, =1.1.152, =1.0.1, =1.0.5, =1.0.10 and more Source cves: CVE-2025-29744 Source advisory: OSV:GHSA-FF9H-848C-4XFJ...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...