EUVD-2025-148000

Malicious code in tear-grsass-rc npm...

EUVD-2025-148001

Malicious code in tear-grsas-rc npm...

EUVD-2025-147999

Malicious code in tear-grsdas-rc npm...

EUVD-2025-147998

Malicious code in tear-hfsips-rc npm...

EUVD-2025-147992

Malicious code in tear-rcbt-rc npm...

EUVD-2025-147990

Malicious code in tear-sdas-rc npm...

EUVD-2025-147989

Malicious code in tear-slas-rc npm...

Malicious code in dajouka-scelas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2f38a3449ea54ac9a292683799d52e4f9b6eb0bcdcfeb1e35e297d1477d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-grsdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d08680c63d6dd5037040ea8bfce9dec930dda5ff1f067d7d7751a7ac7de95cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148002

Malicious code in tear-grass-rc npm...

MAL-2025-154188 Malicious code in dajouka-slas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf12e201d68c30872e143f1bc118d39fae77f4184300466777a2680fe89a14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147991

Malicious code in tear-sas-rc npm...

MAL-2025-154181 Malicious code in dajouka-scelas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2f38a3449ea54ac9a292683799d52e4f9b6eb0bcdcfeb1e35e297d1477d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Please updateBug Fixes and Enhancements: Update .NET 10 to RC 1 rhel-9.7.z JIRA:RHEL-114572 Update .NET 10 to RC 2 rhel-9.7.z JIRA:RHEL-121559 dotnet10.0: .NET Denial of Service Vulnerability rhel-9.7.z JIRA:RHEL-120623...

CVE-2025-64323

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend...

CVE-2025-64323

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend...

CVE-2025-52881 runc: LSM labels can be bypassed with malicious config using dummy procfs files

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...

CVE-2025-52881

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...

AZL-70592 CVE-2025-31133 affecting package kubernetes for versions less than 1.30.10-16

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...

CVE-2025-31133

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...