com.gwtincubator:gwt-incubator-security (1.0.1), com.redhat.rhevm.api:rhevm-api-mock-webapp (>=0.1-milestone, <=0.9-milestone8.2) +200 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.5.6)

org.springframework:spring-webmvc MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gwtincubator:gwt-incubator-security 1.0.1 - com.redhat.rhevm.api:rhevm-api-mock-webapp...

MAL-2025-4336 Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dw-api-mock

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@bifravst/http-api-mock (>=2.1.97, <=2.1.144), @iehr/cdk (>=4.3.190, <=4.3.201) +1 more potentially affected by CVE-2025-2598 via cdk (>=2.172.0, <=2.178.1)

cdk NPM version =2.172.0, =2.1.97, =4.3.190, =3.2.25, =4.0.1 Source cves: CVE-2025-2598 Source advisory: GHSA-V63M-X9R9-8GQP...

@bifravst/http-api-mock (>=2.1.97, <=2.1.144), @iehr/cdk (>=4.3.190, <=4.3.201) +1 more potentially affected by CVE-2025-2598 via cdk (>=2.172.0, <=2.178.1)

cdk NPM version =2.172.0, =2.1.97, =4.3.190, =3.2.25, =4.0.1 Source cves: CVE-2025-2598 Source advisory: MEND:CVE-2025-2598...

skia:api_mock_gpu_canvas: Use-of-uninitialized-value in GrShape::simplifyRect

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5162098826149888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

skia/api_mock_gpu_canvas: Heap-use-after-free in void SkGlyphRunListPainter::drawGlyphRunAsBMPWithPathFallback<GrTextBlob::genera

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5737185492336640 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...