dagit (0.12.14rc2), dagster-airflow (0.12.14rc2) +31 more potentially affected by CVE-2025-51481 via dagster (0.12.14rc2)

dagster PYPI version 0.12.14rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.14rc2 - dagster-airflow 0.12.14rc2 - dagster-aws 0.12.14rc2 - dagster-azure 0.12.14rc2 - dagster-celery 0.12.14rc2 -...

dagit (0.14.17rc7), dagster-airbyte (0.14.17rc7) +35 more potentially affected by CVE-2025-51481 via dagster (0.14.17rc7)

dagster PYPI version 0.14.17rc7 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.17rc7 - dagster-airbyte 0.14.17rc7 - dagster-airflow 0.14.17rc7 - dagster-aws 0.14.17rc7 - dagster-azure 0.14.17rc7 - dagster-cele...

dagit (0.12.3), dagster-airflow (0.12.3) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.3)

dagster PYPI version 0.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.3 - dagster-airflow 0.12.3 - dagster-aws 0.12.3 - dagster-azure 0.12.3 - dagster-cloud 0.12.3 - dagster-dask 0.12.3 - dagster-databric...

dagit (0.13.12), dagster-airflow (0.13.12) +30 more potentially affected by CVE-2025-51481 via dagster (0.13.12)

dagster PYPI version 0.13.12 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.12 - dagster-airflow 0.13.12 - dagster-aws 0.13.12 - dagster-azure 0.13.12 - dagster-celery 0.13.12 - dagster-celery-docker 0.13.12 -...

dagit (0.11.16rc18), dagster-airflow (0.11.16rc18) +29 more potentially affected by CVE-2025-51481 via dagster (0.11.16rc18)

dagster PYPI version 0.11.16rc18 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.11.16rc18 - dagster-airflow 0.11.16rc18 - dagster-aws 0.11.16rc18 - dagster-azure 0.11.16rc18 - dagster-cloud 0.11.16rc18 -...

dagit (0.13.6), dagster-airflow (0.13.6) +31 more potentially affected by CVE-2025-51481 via dagster (0.13.6)

dagster PYPI version 0.13.6 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.6 - dagster-airflow 0.13.6 - dagster-aws 0.13.6 - dagster-azure 0.13.6 - dagster-celery 0.13.6 - dagster-celery-docker 0.13.6 -...

dagit (0.14.9rc0), dagster-airbyte (0.14.9rc0) +33 more potentially affected by CVE-2025-51481 via dagster (0.14.9rc0)

dagster PYPI version 0.14.9rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.14.9rc0 - dagster-airbyte 0.14.9rc0 - dagster-airflow 0.14.9rc0 - dagster-aws 0.14.9rc0 - dagster-azure 0.14.9rc0 - dagster-celery...

dagit (0.12.14rc0), dagster-airflow (0.12.14rc0) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.14rc0)

dagster PYPI version 0.12.14rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.14rc0 - dagster-airflow 0.12.14rc0 - dagster-aws 0.12.14rc0 - dagster-azure 0.12.14rc0 - dagster-cloud 0.12.14rc0 - dagster-dask...

dagit (0.13.14rc0), dagster-airflow (0.13.14rc0) +30 more potentially affected by CVE-2025-51481 via dagster (0.13.14rc0)

dagster PYPI version 0.13.14rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.13.14rc0 - dagster-airflow 0.13.14rc0 - dagster-aws 0.13.14rc0 - dagster-azure 0.13.14rc0 - dagster-celery 0.13.14rc0 -...

dagit (0.15.2), dagster-airbyte (0.15.2) +35 more potentially affected by CVE-2025-51481 via dagster (0.15.2)

dagster PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.15.2 - dagster-airbyte 0.15.2 - dagster-airflow 0.15.2 - dagster-aws 0.15.2 - dagster-azure 0.15.2 - dagster-celery 0.15.2 -...

dagit (0.12.10rc0), dagster-airflow (0.12.10rc0) +28 more potentially affected by CVE-2025-51481 via dagster (0.12.10rc0)

dagster PYPI version 0.12.10rc0 is affected by a known vulnerability. The following packages have a transitive dependency on dagster and may be impacted: - dagit 0.12.10rc0 - dagster-airflow 0.12.10rc0 - dagster-aws 0.12.10rc0 - dagster-azure 0.12.10rc0 - dagster-cloud 0.12.10rc0 - dagster-dask...

Malware in aws-iot-twinmaker-grafana-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6152 Malicious code in aws-iot-twinmaker-grafana-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4ed5abc6b9aacfab44cd41a0d5b9609603b25a6a318e051d71e9efa218d851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded Malicious Package

Overview @toptal/picasso-provider is a malicious package. through the preinstall and postinstall scripts. A potentially compromised account operating in Toptal's GitHub organization exposed an AWS token, leading to the account being taken over. This allowed the attackers to expose private...

Embedded Malicious Package

Overview @toptal/picasso-quote is a malicious package. through the preinstall and postinstall scripts. A potentially compromised account operating in Toptal's GitHub organization exposed an AWS token, leading to the account being taken over. This allowed the attackers to expose private...

CVE-2025-49827

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted formerly known as Conjur Enterprise 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipula...

USN-7611-3 linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; CVE-2025-38000, CVE-2025-37890, CVE-2025-38001, CVE-2025-37997, CVE-2025-3793...

Wiz MCP Server Now Available in the new AWS Marketplace AI Agents and Tools category

Improve security posture and remediate risks faster using natural language workflows...

Support for AWS Elastic VMware Service (EVS) with Veeam Backup & Replication

Support Statement Veeam Backup & Replication fully supports AWS Elastic VMware Service EVS, treating it as a standard vSphere environment. Built on VMware Cloud Foundation VCF 5.2.x, EVS provides customers with comprehensive administrative access to vCenter, NSX, and other essential VMware...

CVE-2025-49827

Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted formerly known as Conjur Enterprise 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipula...