CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, kubernetes-fips, syft-fips, cni-plugins-fips, eks-distro, kubernetes-csi-driver-nfs, rke2-runtime-fips, trivy-operator-fips, kubescape-operator-fips, nerdctl, ctop, k9s, grype-db, longhorn-share-manager-fips, blob-csi-fips, cluster-autoscaler-fip...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, azure-container-networking, cluster-autoscaler-fips, kubernetes-fips, node-feature-discovery, grafana-alloy, buildah, rancher, eks-distro, sriov-network-device-plugin-fips, prometheus-podman-exporter, k3s, ctop-fips,...

SUSE CVE-2025-62370

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

CVE-2025-62370

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

GHSA-PGP9-98JM-WWQ2 alloy-dyn-abi has DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Impact An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can...

EUVD-2025-34683

alloy-dyn-abi has DoS vulnerability on alloydynabi::TypedData hashing...

CVE-2025-62370 Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

CVE-2025-62370 Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

CVE-2025-62370 Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services m...

CVE-2025-62370

CVE-2025-62370 affects Alloy Core libraries at the root of the Rust Ethereum ecosystem, specifically the alloy-dyn-abi::TypedData hashing path. A DoS could result from an uncaught panic triggered by malformed input to TypedData, enabling denial-of-service via eip712_signing_hash(). The issue exis...

RUSTSEC-2025-0073 DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially...

Alloy 安全漏洞

Alloy is a library in Rust open sourced by Alloy. A security vulnerability exists in Alloy versions prior to 0.8.26 and prior to 1.4.1, which stems from the mishandling of malformed input by alloydynabi::TypedData, which could lead to a denial-of-service attack...

alloy-1.11.2-2.1 on GA media (moderate)

alloy-1.11.2-2.1 on GA media Announcement ID: openSUSE-SU-2025:15631-1 Rating: moderate Cross-References: CVE-2025-11065 CVE-2025-58058 CVSS scores: CVE-2025-11065 SUSE : 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N CVE-2025-11065 SUSE : 5.7...

OPENSUSE-SU-2025:15631-1 alloy-1.11.2-2.1 on GA media

These are all security issues fixed in the alloy-1.11.2-2.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2024-2770

Malicious code in bioql PyPI...

MAL-2025-47577 Malicious code in adobe-alloy-mini-site (npm)

The package adobe-alloy-mini-site was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d728d9b200c3b58899afcf6beb561ec60882028a3368ade745710195d969df22 This package installs a dependency hosted on a custom domain that...

Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

Malicious code in adobe-alloy-mini-site (npm)

The package adobe-alloy-mini-site was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d728d9b200c3b58899afcf6beb561ec60882028a3368ade745710195d969df22 This package installs a dependency hosted on a custom domain that...

MAL-2025-47576 Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

CVE-2025-59332

3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...