4545 matches found
Mageia: Security Advisory (MGASA-2025-0275)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated perl-YAML-LibYAML packages fix security vulnerability
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified. CVE-2025-40908...
MGASA-2025-0275 Updated perl-YAML-LibYAML packages fix security vulnerability
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified. CVE-2025-40908...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.5 Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more...
Malicious code in yaml-foundation-antares-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111755
Malicious code in levels-npm-yaml-xanadu npm...
EUVD-2025-116476
Malicious code in async-hugo-yaml-rimraf npm...
EUVD-2025-122728
Malicious code in rehype-yaml-tailwindcss-levels npm...
EUVD-2025-120363
Malicious code in wolf-yaml-morgan-cross-env npm...
EUVD-2025-113777
Malicious code in event-yaml-scorpius-ora npm...
EUVD-2025-121099
Malicious code in triton-taurus-callisto-yaml npm...
EUVD-2025-120148
Malicious code in yaml-arcturus-postgres-jabbah npm...
EUVD-2025-113416
Malicious code in framework-wolf-yaml-electron-builder npm...
EUVD-2025-122435
Malicious code in rocket-yaml-vortex-rollup-plugin npm...
EUVD-2025-111409
Malicious code in markdown-pdf-restart-scripts-yaml npm...
Malicious code in spectron-bootstrap-yaml-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116520
Malicious code in ariel-cluster-yaml-vega npm...
EUVD-2025-124494
Malicious code in nextjs-xml-yaml-fork npm...