Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash in stacktop for tasks without an ABI or vDSO Not all tasks have an ABI associated with them, or a vDSO mapped to them. For example, kthreads never have such an ABI. If such a task calls stacktop, it will...

Malicious Package

Overview near-abi-client-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in near-abi-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35943

Malicious code in near-abi-client-js npm...

MAL-2025-48605 Malicious code in near-abi-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PGP9-98JM-WWQ2 alloy-dyn-abi has DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Impact An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can...

EUVD-2025-34683

alloy-dyn-abi has DoS vulnerability on alloydynabi::TypedData hashing...

RUSTSEC-2025-0073 DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially...

EUVD-2017-11624

Malware in sbrugna...

EUVD-2025-26773

Malicious code in bioql PyPI...

EUVD-2025-10342

Malicious code in bioql PyPI...

EUVD-2023-1359

Malicious code in bioql PyPI...

CLSA-2025-1758020272 Update of alt-php

Bump ABI 5.4.0-221...

Malicious code in @coveops/abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 75499720f09aaa0ee53321facfb199f2c3234acabc101127ae22bbd4fa90bb1d This package was compromised and malicious code added as part of a phishing campaign...

MAL-2025-47025 Malicious code in @coveops/abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 75499720f09aaa0ee53321facfb199f2c3234acabc101127ae22bbd4fa90bb1d This package was compromised and malicious code added as part of a phishing campaign...

Linux Distros Unpatched Vulnerability : CVE-2025-38696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task...

SUSE CVE-2025-38696

In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task ever ends up calling stacktop, it will derefence the NULL ABI pointer...

CVE-2025-38696

In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task ever ends up calling stacktop, it will derefence the NULL ABI pointer...

AZL-66797 CVE-2025-38696 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task ever ends up calling stacktop, it will derefence the NULL ABI pointer...

Fedora 42 : exiv2 (2025-387e64c9fd)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-387e64c9fd advisory. Exiv2 0.28.6 + patch to fix silent abi breakage ---- Exiv2 v0.28.6 Fixes two low severity CVEs Tenable has extracted the preceding description block...