Malicious code in @liquid-web/external-cards (npm)

The package @liquid-web/external-cards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e81420d5a4cb08f13be05af2ffed94d4b7620b4724b99be90886fe07e7d39e Any computer that has this package installed or running should be considered...

MAL-2025-47038 Malicious code in @liquid-web/models (npm)

The package @liquid-web/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c4dab8510635c784a7216857ef9d389224b338150feaf297bbb75eb824bdcf Any computer that has this package installed or running should be considered fully...

CVE-2025-40300

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. Existing mitigations already protect kernel/KVM...

Outdated Tech, Rising Risk: How Federal Agencies Can Eliminate Tech Debt and Reduce Cyber Risk

Amid shrinking budgets and workforce pressures, your agency, like many across the federal government, is likely grappling with the growing challenge of technical debt tech debt. Tech debt, the accumulation of outdated or under-maintained technology, can slow progress and put your agency’s mission...

GHSA-RRJV-57MM-J6CM vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-GCF6-VGCR-474F vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-23166 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-GCF6-VGCR-474F vulnerabilities

Vulnerabilities for packages: nodejs...

MAL-2025-47008 Malicious code in @js-to-lua/lua-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddfe717b22bb57e4e1887887c45646abfa625e1d566049a635b86193170cdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x-session-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656368dae017043edc5b926e1ca7ff9f6e3526b8de21a92a3ce573d70d89ba07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47021 Malicious code in rushstack-lockfile-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ab388958610beed90f3054ac980a3e187917b93ec99f6f75cbeeff5c3f5dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47017 Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-9086

A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with only a slash as path path="/". Since this site is not...

Linux Distros Unpatched Vulnerability : CVE-2021-45329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field. CVE-2021-45329...

Linux Distros Unpatched Vulnerability : CVE-2018-15870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault a...

Linux Distros Unpatched Vulnerability : CVE-2016-1856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2021-41751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecmabuiltinarrayprototypeobjectslice in Jerryscript before commit...

Linux Distros Unpatched Vulnerability : CVE-2011-0218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...

Linux Distros Unpatched Vulnerability : CVE-2024-23984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

Linux Distros Unpatched Vulnerability : CVE-2017-14643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AP4HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and...