EUVD-2020-17351

Malware in sbrugna...

EUVD-2021-21268

Malware in sbrugna...

EUVD-2021-24213

Malware in sbrugna...

EUVD-2021-24209

Malware in sbrugna...

EUVD-2021-24212

Malware in sbrugna...

EUVD-2021-12061

Malware in sbrugna...

EUVD-2021-24201

Malware in sbrugna...

EUVD-2021-24200

Malware in sbrugna...

EUVD-2021-24203

Malware in sbrugna...

EUVD-2021-28141

Malicious code in bioql PyPI...

EUVD-2022-35062

Malicious code in bioql PyPI...

EUVD-2023-32466

Malicious code in bioql PyPI...

EUVD-2025-6734

Malicious code in bioql PyPI...

XWiki leaks password hashes and other accessible password properties

Impact Any user with edit right on a page of the wiki can create an XClass with a database list property that references a password property, for example the password hash that is stored for users. When adding an object of that XClass, the content of that password property is displayed. In...

Alchemy Non-SMA and Webauthn Account Security Advisory

Impact A potential security issue has been mitigated on old account deployment functions from the factory. Smart wallets in use on all existing supported networks are not impacted. Patches Please direct creation of new wallets to either createSemiModularAccount on AccountFactory.sol or...

GHSA-56R6-CCM5-8HG3 Alchemy Non-SMA and Webauthn Account Security Advisory

Impact A potential security issue has been mitigated on old account deployment functions from the factory. Smart wallets in use on all existing supported networks are not impacted. Patches Please direct creation of new wallets to either createSemiModularAccount on AccountFactory.sol or...

GHSA-5662-CV6M-63WH melange's world-writable permissions expose SBOM files to potential image tampering

It was discovered that the SBOM files generated by melange in apks had file system permissions mode 666: $ apkrane ls https://packages.wolfi.dev/os/x8664/APKINDEX.tar.gz -P hello-wolfi --full --latest | xargs wget -q -O - | tar tzv 2/dev/null var/lib/db/sbom drwxr-xr-x root/root 0 2025-06-23 14:1...

RHSA-2025:10976 Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, and kpatch-patch-4_18_0-372_91_1 security update

Bulletin has no description...

Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

Impact There is an arbitrary code execution vulnerability in the CsvEnumerator class of the job-iteration repository. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system where the application is running, potentially leading to unauthorized access, data...

Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

Impact There is an arbitrary code execution vulnerability in the CsvEnumerator class of the job-iteration repository. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system where the application is running, potentially leading to unauthorized access, data...