250 matches found
EUVD-2025-60222
Malicious code in damagedbisonz3n npm...
MAL-2025-61535 Malicious code in uniform_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6dfa39e2dae3876556ae4c56c3850dcc0782cc4c4278559cfa9eb4399a8fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49746
Malicious code in naturalbisonz3n npm...
MAL-2025-61703 Malicious code in ytterbic_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c5234089dfff776556a3d0f5f93dbbfd83c7ebbd1894b5c9f99ee36cc2cb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-45461
Malicious code in rivalbisonz3n npm...
EUVD-2020-6307
Malware in sbrugna...
EUVD-2020-16975
Malware in sbrugna...
EUVD-2025-24007
Malicious code in bioql PyPI...
EUVD-2025-24010
Malicious code in bioql PyPI...
GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.
...
The vulnerability of the GNU Bison parser generator lies in improper restrictions on operations within the buffer memory, which allows a malicious actor to trigger a service failure.
The vulnerability of the GNU Bison parser generator is related to incorrect restrictions on operations within the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
GNU Bison scan-code.c code_free double free
...
GNU Bison obprintf.c __obstack_vprintf_internal assertion
...
ROS-20250829-05
The vulnerability of the GNU Bison universal parser generator is related to manipulation of the function obstackvprintfinternal of the obprintf.c. file. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20250828-02
A vulnerability in the GNU Bison universal parser generator is related to double memory freeing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2020-24240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if...
Linux Distros Unpatched Vulnerability : CVE-2025-8733
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GNU Bison up to 3.8.2. This affects the function obstackvprintfinternal of the file obprintf.c. Executing manipulation can lead to...
Linux Distros Unpatched Vulnerability : CVE-2025-8734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GNU Bison up to 3.8.2. This impacts the function codefree of the file src/scan-code.c. The manipulation leads to double free. ...
