1061 matches found
CVE-2025-13507: Improper Validation of Specified Quantity in Input
Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...
MongoDB -- Improper Validation of Specified Quantity in Input
https://jira.mongodb.org/browse/SERVER-108565 reports: Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination...
assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2025-66019 via pypdf (3.16.4)
pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2025-66019 Source advisory: OSV:GHSA-M449-CWJH-6PW7...
kea security update
An update is available for kea. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DHCP implementation from Internet Systems Consortium, Inc. that features fully...
EUVD-2025-180312
Malicious code in assert-analyze-authorize-awk-eta npm...
EUVD-2025-176575
Malicious code in runtime-void-resolve-assert-public npm...
EUVD-2025-179094
Malicious code in epsilon-beta-key-double-assert npm...
EUVD-2025-180311
Malicious code in assert-float-private-process-star npm...
EUVD-2025-178442
Malicious code in import-uglify-shell-assert-key npm...
EUVD-2025-176327
Malicious code in small-route-assert-compile-interface npm...
EUVD-2025-179620
Malicious code in compress-async-rho-boolean-assert npm...
EUVD-2025-180455
Malicious code in alpha-integer-pi-assert-export npm...
EUVD-2025-175639
Malicious code in water-assert-file-data-emulate npm...
EUVD-2025-175700
Malicious code in visualize-visualize-test-assert-monitor npm...
EUVD-2025-179207
Malicious code in easy-serialize-omicron-mu-assert npm...
EUVD-2025-179928
Malicious code in byte-assert-finally-hot-sanitize npm...
EUVD-2025-176221
Malicious code in star-permission-parse-assert-small npm...
EUVD-2025-180313
Malicious code in assert-alpha-boolean-awk-mock npm...
Malicious code in eta-sed-assert-spy-hash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02fba2294b944dedb22735bc1a124430a994c135af1e2b1361494f868a743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...