5874 matches found
hexchat crate is unsound and unmaintained
All versions of this crate have function deregistercommand which can result in use after free. This is unsound. In addition, all versions since 0.3.0 have "safe" macros, which are documented as unsafe to use in threads. In addition, the hexchat crate is no longer actively maintained. If you rely ...
CLSA-2025-1763136711 Fix CVE(s): CVE-2022-29154, CVE-2024-12087, CVE-2024-12088
SECURITY UPDATE: malicious remote servers to write arbitrary files inside the directories of connecting peers: - debian/patches/els/0001-CVE-2022-29154.patch: fix insufficient validation of file names. - CVE-2022-29154. SECURITY UPDATE: path traversal vulnerability. -...
OESA-2025-2689 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...
OESA-2025-2690 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...
OESA-2025-2691 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...
EUVD-2025-177565
Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...
EUVD-2025-176836
Malicious code in query-betelgeuse-nebula-dotenv-safe npm...
EUVD-2025-179650
Malicious code in command-dotenv-safe-oberon-lint-staged npm...
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-175840
Malicious code in umbra-australis-dotenv-safe-google npm...
EUVD-2025-179312
Malicious code in despina-publish-spectron-webdriver-dotenv-safe npm...
EUVD-2025-175509
Malicious code in xenobiology-technocracy-dotenv-safe-brane npm...
EUVD-2025-178364
Malicious code in interstellarmedium-remark-procyon-dotenv-safe npm...
EUVD-2025-178105
Malicious code in library-dotenv-safe-gridsome-singularity npm...
EUVD-2025-179255
Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...
EUVD-2025-175528
Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...
EUVD-2025-179575
Malicious code in cordelia-indus-cors-dotenv-safe npm...
EUVD-2025-177979
Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...