CVE-2023-53295

In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails or happens only partly, we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline...

CVE-2023-53288

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclientmodesetprobe When a new mode is set to modeset-mode, the previous mode should be freed. This fixes the following kmemleak report: drmmodeduplicate+0x45/0x220 drm...

Malicious code in kinyongi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d732e3667e35428369a2536b0d3d1ba6f5afbedd13b166bd769316c2ac8c750c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in login-tokenizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd2c92f86a125653632d04c1a4dbd53c5277d7362e0caaff90e0f65b7a92c5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47319 Malicious code in jsonwebjstoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5866f0ff5443038e8141f9674f6d4d83ef512aba824b8a430cbd459f9dfba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47326 Malicious code in mcp-knowledge-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4724282166039be3118847ca134f1f7cabc4997246050c1b2a195ad521ed995 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47279 Malicious code in @teselagen/sequence-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47275 Malicious code in @teselagen/ove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c137afc6d3e31e5f4509c510c57e859b10399e8b246cd19aed5188a55f59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-765J-9R45-W2Q2 vulnerabilities

Vulnerabilities for packages: airflow-core, superset...

Malicious code in react-jsonschema-rxnt-extras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e29ae9593362f6ccecd21ee9abaabfe0baf7da78be18ebeeef87277d03b1f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @rxnt/providerdashboard-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4ec1ce2a46915727874f848509d1cc83c752b67f08b1eaff0d89dac6606de8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47266 Malicious code in @rxnt/ambientiqstandaloneapi-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d4084f155a192c466c14a5f1b90a954c7ce9be74b5071b04730d44510a364a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-50284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: fix memory leak in initmqueuefs When setupmqsysctls failed in initmqueuefs, mqueueinodecachep is not released. In order to fix this issue, the release path...

Linux Distros Unpatched Vulnerability : CVE-2022-50307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix out-of-bounds access on cioignore free The channel-subsystem-driver scans for...

CVE-2023-53269

In the Linux kernel, the following vulnerability has been resolved: block: ublk: make sure that block size is set correctly block size is one very key setting for block layer, and bad block size could panic kernel easily. Make sure that block size is set correctly. Meantime if ublkvalidateparams...

CVE-2023-53263

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of nouveauconnectorcreate We can't simply free the connector after calling drmconnectorinit on it. We need to clean up the drm side first. It might not fix all regressions fr...

Linux Distros Unpatched Vulnerability : CVE-2023-53152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix calltrace warning in amddrmbuddyfini The following call trace is observed when removing the amdgpu driver, which is caused by that BOs allocated...

CVE-2025-59437

The ip aka node-ip package through 2.0.1 in NPM might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection...

Linux Distros Unpatched Vulnerability : CVE-2023-53195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mlxsw: minimal: fix potential memory leak in mlxswmlinecardsinit The line cards array is not...

Malicious code in koa2-swagger-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31fd12270f2d2a5b53bfaf3aabcbae8d26a7eec21613c28e4673369a33025ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...