Malicious code in thambi-ref-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135577

Malicious code in thambi-ref-trers npm...

Malicious code in thambi-ref-vrete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2792ff640b6461a841f60a6f8f345d75c2c076486df73ef2bcb941f2234c7f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-ref-trers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15b232fc23010556743ac7133744051f4911ee7f4c0a1e97f13eceb14ce3ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990406 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990610 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadvpurgeorigref Many syzbot reports are pointing to soft...

Moderate: galera and mariadb security update

Galera is a fast synchronous multimaster wsrep provider replication engine for transactional databases and similar applications. For more information about wsrep API see repository. For a description of Galera replication engine see web. Security Fixes: mysql: High Privilege Denial of Service...

EUVD-2025-37066

Malicious code in mms-ref-client npm...

EUVD-2025-37065

Malicious code in mms-ref-dedserver npm...

Malicious code in mms-ref-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3d204e0f49cb41d203a04419909bce2a366f33ab7859b4e1977374ec1db93e The package mms-ref-client was found to contain malicious code...

Malicious code in mms-ref-dedserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93da1778cc346bce6d2f674c1b600f0b6d8ea31cd2ee84b0f5d2f22df220ce3a The package mms-ref-dedserver was found to contain malicious code...

MAL-2025-49228 Malicious code in mms-ref-dedserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93da1778cc346bce6d2f674c1b600f0b6d8ea31cd2ee84b0f5d2f22df220ce3a The package mms-ref-dedserver was found to contain malicious code...

MAL-2025-49227 Malicious code in mms-ref-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3d204e0f49cb41d203a04419909bce2a366f33ab7859b4e1977374ec1db93e The package mms-ref-client was found to contain malicious code...

binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...

EUVD-2025-35632

binaryvecio access memory out-of-bounds in binaryreadtoref and binarywritefromref...

Out-of-bounds memory access in binary_read_to_ref and binary_write_from_ref

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...

CVE-2022-50553

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

CVE-2022-50553 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

CVE-2022-50553

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

EUVD-2025-32782

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...