MAL-2025-379 Malicious code in amazon-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8c3ed9194a70a080c9814645d91c46cf2195692168d2efa5e08e5078a853d91 The OpenSSF Package Analysis project identified 'amazon-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8c3ed9194a70a080c9814645d91c46cf2195692168d2efa5e08e5078a853d91 The OpenSSF Package Analysis project identified 'amazon-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-385 Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37b343f6247424c351b1652a4790cc2f86d3901894612c95b676ed5bf3f96300 The OpenSSF Package Analysis project identified 'amazon-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-380 Malicious code in amazon-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37b343f6247424c351b1652a4790cc2f86d3901894612c95b676ed5bf3f96300 The OpenSSF Package Analysis project identified 'amazon-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-383 Malicious code in amazon-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca95e83b37fb0ea358d6155d8158d873558f75026d3e1b8304456522fafc7755 The OpenSSF Package Analysis project identified 'amazon-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca95e83b37fb0ea358d6155d8158d873558f75026d3e1b8304456522fafc7755 The OpenSSF Package Analysis project identified 'amazon-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00fffe8a9d54ad61ee1ae7e0d4091db1d8f442df37de1763e2a81e4647fc0dba The OpenSSF Package Analysis project identified 'amazon-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-382 Malicious code in amazon-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00fffe8a9d54ad61ee1ae7e0d4091db1d8f442df37de1763e2a81e4647fc0dba The OpenSSF Package Analysis project identified 'amazon-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4127486bd0cb05750c82045767db0554a5756fc8dad2794d13ce5284ebf4bf4c The OpenSSF Package Analysis project identified 'amazon-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-386 Malicious code in amazon-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4127486bd0cb05750c82045767db0554a5756fc8dad2794d13ce5284ebf4bf4c The OpenSSF Package Analysis project identified 'amazon-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-387 Malicious code in amazon-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2ade59f3434fffed78a5a2b75e5e864edb9894b80c3e7e5d8560e48d35f9b8d The OpenSSF Package Analysis project identified 'amazon-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2ade59f3434fffed78a5a2b75e5e864edb9894b80c3e7e5d8560e48d35f9b8d The OpenSSF Package Analysis project identified 'amazon-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Important: iperf3

Issue Overview: iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters function. CVE-2024-53580 Affected Packages: iperf3 Issue Correction: Run dnf update iperf3 --releasever 2023.6.20250123 or dnf update --advisory ALAS2023-2025-812 --releasever...

Important: iperf3

Issue Overview: iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters function. CVE-2024-53580 Affected Packages: iperf3 Issue Correction: Run dnf update iperf3 --releasever 2023.6.20250123 to update your system. New Packages: aarch64: ...

Important: postgresql

Issue Overview: Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack...

Amazon Linux 2023 : runfinch-finch (ALAS2023-2025-816)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-816 advisory. An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

Medium: perl-Module-ScanDeps

Issue Overview: Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-078 (ALASKERNEL-5.10-2025-078)

The version of kernel installed on the remote host is prior to 5.10.230-223.885. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-078 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have...