MAL-2025-32471 Malicious code in rou4ng (npm)

The package rou4ng was found to contain malicious code...

MAL-2025-34096 Malicious code in string-neuromorphic-ursa-alphard (npm)

The package string-neuromorphic-ursa-alphard was found to contain malicious code...

MAL-2025-28483 Malicious code in orchid-xenon-cfr506-project (npm)

The package orchid-xenon-cfr506-project was found to contain malicious code...

CVE-2025-8314 Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter

The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Software Issue Manager 跨站脚本漏洞

The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...

PT-2025-32624 · WordPress · Software Issue Manager

Name of the Vulnerable Software and Affected Versions: Software Issue Manager plugin for WordPress versions up to and including 5.0.1 Description: The Software Issue Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting through the noaccess msg parameter due to insufficient...

CGA-925R-XP4G-39WR

Bulletin has no description...

MINI-CXRF-822R-3XJJ

Bulletin has no description...

MINI-H6Q6-GRRH-24RG

Bulletin has no description...

MINI-H66C-2WH7-68H4

Bulletin has no description...

MINI-F7GJ-PHFH-RG9P

Bulletin has no description...

MINI-9M25-5XP9-CVGJ

Bulletin has no description...

MINI-7FWC-F2G6-7RCC

Bulletin has no description...

MINI-5GV5-44CF-6278

Bulletin has no description...

MINI-55PG-V2P9-9JF9

Bulletin has no description...

MINI-XWRF-429X-R36H

Bulletin has no description...

MINI-25Q9-9C6R-R592

Bulletin has no description...

MINI-23WM-JHM6-4R63

Bulletin has no description...

GO-2025-3823 Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno

Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno...

Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...