201 matches found
AZL-75458 CVE-2025-11065 affecting package cri-o for versions less than 1.22.3-20
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
AZL-75402 CVE-2025-11065 affecting package podman 5.6.1-10
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
CVE-2025-11065 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
mapstructure security vulnerability
MapStructure is a Go language library developed by Viper. There is a security vulnerability in MapStructure. This vulnerability arises from the use of MapStructure.WeakDecode; errors during this process may lead to sensitive input values being leaked, potentially causing information leaks...
OPENSUSE-SU-2025:20143-1 Security update for git-bug
This update for git-bug fixes the following issues: Changes in git-bug: - Revendor to include fixed version of depending libraries: - GO-2025-4116 CVE-2025-47913, bsc1253506 upgrade golang.org/x/crypto to v0.43.0 - GO-2025-3900 GHSA-2464-8j7c-4cjm upgrade github.com/go-viper/mapstructure/v2 to...
EUVD-2025-117120
Malicious code in rich-ivory-viper npm...
EUVD-2025-100757
Malicious code in chillyviperz3n npm...
EUVD-2025-100717
Malicious code in vividviperz3n npm...
Malicious code in vivid_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d40c5e52ebf06af24f18897761a7b616b6aac6a1c7e1a2daec8e9f0a8022bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-95103
Malicious code in shiveringviperz3n npm...
EUVD-2025-97113
Malicious code in juicyviperz3n npm...
MAL-2025-123197 Malicious code in shivering_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d03e3ac6ee999d2a2f4d22a3a61838f8286e10deb70b85f22272d694dd1cf48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105966
Malicious code in curiousviperz3n npm...
Malicious code in shivering_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d03e3ac6ee999d2a2f4d22a3a61838f8286e10deb70b85f22272d694dd1cf48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89469
Malicious code in potentialviperz3n npm...
Malicious code in potential_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78b6b378f868bfb0e5499d2cf425e4e0230b1dc56038f8f1a70f71bc2f51adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89198
Malicious code in religiousviperz3n npm...
MAL-2025-116120 Malicious code in nutty_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f2de1b759d618f08b955c19a4c551f65eca99de323805bee50726ff64c24a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...