Malicious code in provider-configurations (npm)

The package provider-configurations was found to contain malicious code...

MAL-2025-19273 Malicious code in eip-119-json-provider (npm)

The package eip-119-json-provider was found to contain malicious code...

MAL-2025-30780 Malicious code in provider-configurations (npm)

The package provider-configurations was found to contain malicious code...

MAL-2025-9105 Malicious code in @moneyguide-dev/style-provider (npm)

The package @moneyguide-dev/style-provider was found to contain malicious code...

MAL-2025-7109 Malicious code in @ba-bc-child/provider (npm)

The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

Malicious code in @fm-plugin/dynamic-module-provider (npm)

The package @fm-plugin/dynamic-module-provider was found to contain malicious code...

Malicious code in eip-119-json-provider (npm)

The package eip-119-json-provider was found to contain malicious code...

Malicious code in @ba-bc-child/provider (npm)

The package @ba-bc-child/provider was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-14534 Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

MAL-2025-7936 Malicious code in @fm-plugin/dynamic-module-provider (npm)

The package @fm-plugin/dynamic-module-provider was found to contain malicious code...

MAL-2025-9665 Malicious code in @wisetail/style-provider (npm)

The package @wisetail/style-provider was found to contain malicious code...

SUSE CVE-2025-53942

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Allocatio...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An attacker can cause excessive resource allocation by submitting specially crafted ASN.1...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An...

Social-Sensor Identity Cloning Detection Using Weakly Supervised Deep Forest and Cryptographic Authentication

Recent years have witnessed a rising trend in social-sensor cloud identity cloning incidents. However, existing approaches suffer from unsatisfactory performance, a lack of solutions for detecting duplicated accounts, and a lack of large-scale evaluations on real-world datasets. We introduce a...

SUSE CVE-2021-21411

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The --gitlab-group flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization wasn't restricted...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...