MAL-2025-192900 Malicious code in chalk-interface (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-hostname (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192901 Malicious code in chalk-sentry (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-consul (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192898 Malicious code in chalk-henson (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192897 Malicious code in chalk-consul (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192895 Malicious code in chalk-aws (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-aws (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

pcs security update

0.11.10-1.el97.1 - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938 0.11.10-1 - Rebased pcs to the latest sources see CHANGELOG.md Resolves: RHEL-77194,...

rack: Rack memory exhaustion denial of service

A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...

rack: Rack memory exhaustion denial of service

A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

Cybersecurity researchers have identified several malicious packages across npm, Python, and Ruby ecosystems that leverage Discord as a command-and-control C2 channel to transmit stolen data to actor-controlled webhooks. Webhooks on Discord are a way to post messages to channels in the platform...

EUVD-2019-0550

Malware in sbrugna...

EUVD-2019-0514

Malware in sbrugna...

EUVD-2021-0831

Malware in sbrugna...

EUVD-2019-0533

Malware in sbrugna...

EUVD-2019-0493

Malware in sbrugna...

EUVD-2019-0614

Malware in sbrugna...

EUVD-2019-0502

Malware in sbrugna...

EUVD-2019-0506

Malware in sbrugna...