MAL-2025-22122 Malicious code in hadron-ophiuchus-bootstrap-lacerta (npm)

The package hadron-ophiuchus-bootstrap-lacerta was found to contain malicious code...

MAL-2025-31768 Malicious code in react-bootstrap-nightwatch-andromeda-mysql (npm)

The package react-bootstrap-nightwatch-andromeda-mysql was found to contain malicious code...

MAL-2025-31770 Malicious code in react-bootstrap-prettier-stylelint-parsec-mechatronics (npm)

The package react-bootstrap-prettier-stylelint-parsec-mechatronics was found to contain malicious code...

MAL-2025-32614 Malicious code in sadr-transhumanism-janus-bootstrap (npm)

The package sadr-transhumanism-janus-bootstrap was found to contain malicious code...

MAL-2025-17478 Malicious code in configstore-cluster-cors-react-bootstrap (npm)

The package configstore-cluster-cors-react-bootstrap was found to contain malicious code...

MAL-2025-22352 Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm)

The package heka-react-bootstrap-electron-builder-puppeteer was found to contain malicious code...

MAL-2025-15492 Malicious code in baryon-spica-async-bootstrap (npm)

The package baryon-spica-async-bootstrap was found to contain malicious code...

CVE-2025-8904

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...

CVE-2025-8904 Privilege escalation issue in Amazon EMR Secret Agent component

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...

Linux Distros Unpatched Vulnerability : CVE-2025-1647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue...

Malicious Package

Overview vite-postcss-bootstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in vite-postcss-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6346 Malicious code in vite-postcss-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vite-postcss-bootstrap

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-H4J7-5RXR-P4WC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-26646 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-H4J7-5RXR-P4WC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-26646 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

VulnCheck KEV: CVE-2025-47204

An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...

Optimal Debiased Inference on Privatized Data Via Indirect Estimation and Parametric Bootstrap

We design a debiased parametric bootstrap framework for statistical inference from differentially private data. Existing usage of the parametric bootstrap on privatized data ignored or avoided handling the effect of clamping, a technique employed by the majority of privacy mechanisms. Ignoring th...