GHSA-37WC-H8XC-5HC4 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, shadowsocks-rust...

DSA-5863-1 libtasn1-6 - security update

Bulletin has no description...

CVE-2024-21502

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...

OPENSUSE-SU-2025:14731-1 MozillaThunderbird-128.7.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1037 Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

MAL-2025-1034 Malicious code in com.siccity.gltfutility (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201fb69ebbdbf7099f322edee00ed68a1cd7e707883db97efe712a72155f15e2 Any computer that has this package installed or running should be considered...

MAL-2025-1011 Malicious code in @infinid-indonesia/ui-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4eeca2bfa3c0d32dbee35f8956b2e79049540d209630206d040f2573ff118c6 Any computer that has this package installed or running should be considered...

MAL-2025-1013 Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...

Malicious code in expense-management (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-774 Malicious code in @mrpudidi/gravatar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-744 Malicious code in jqtools-overlay (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-730 Malicious code in @wongapl/sliders (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in theme-check-vscode (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-664 Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...

MAL-2025-669 Malicious code in kibana-release-notes (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-601 Malicious code in @komoot/kvstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69080cf029fa20c98da2bad77409a3d11fedade172f91af674b8161e64755928 The OpenSSF Package Analysis project identified '@komoot/kvstore' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...

OPENSUSE-SU-2025:14712-1 python311-pydantic-2.10.6-1.1 on GA media

These are all security issues fixed in the python311-pydantic-2.10.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14708-1 owasp-modsecurity-crs-4.9.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14707-1 openvpn-2.6.10-5.1 on GA media

These are all security issues fixed in the openvpn-2.6.10-5.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1989 Malicious code in reque (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ce48406d7fce137de7e9a500179d7d6fcc5857714587372c977c5d6793cad30 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...