CVE-2025-32784

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025.4.10, a race condition vulnerability has been identified in the conda-forge-webservices component used within the shared build infrastructure. This vulnerability, categorized a...

CVE-2025-32784: Time-of-check Time-of-use (TOCTOU) Race Condition

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025.4.10, a race condition vulnerability has been identified in the conda-forge-webservices component used within the shared build infrastructure. This vulnerability, categorized a...

PT-2025-16541 · Conda Forge · Conda-Forge-Webservices

Name of the Vulnerable Software and Affected Versions: conda-forge-webservices versions prior to 2025.4.10 Description: A Time-of-Check to Time-of-Use TOCTOU issue has been identified in the conda-forge-webservices component, which can be exploited to introduce unauthorized modifications to build...

CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24

CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24. A patched version of the package is available...

Comfast CF-616AC V2 of Shenzhen Sihai Zonglian Network Technology Co., Ltd. suffers from logic flaw vulnerability

Comfast CF-616AC V2 is a wireless router. Comfast CF-616AC V2 has a logic flaw vulnerability that can be exploited by an attacker to cause a denial of service...

CVE-2025-31484: Improper Access Control

conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a packa...

MAL-2025-2865 Malicious code in cf-middleware-set-header (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cf-middleware-set-header (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-48795 affecting package cf-cli for versions less than 8.7.11-1

CVE-2023-48795 affecting package cf-cli for versions less than 8.7.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2

CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2. A patched version of the package is available...

CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13

CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13. A patched version of the package is available...

SUSE CVE-2022-49354

In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we should use putdevice to release it when not need anymore. Add missing putdevice to avoid refcount leak...

AZL-57347 CVE-2025-22869 affecting package cf-cli for versions less than 8.7.11-2

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

DEBIAN-CVE-2022-49354

In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we should use putdevice to release it when not need anymore. Add missing putdevice to avoid refcount leak...

UBUNTU-CVE-2022-49354

In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we should use putdevice to release it when not need anymore. Add missing putdevice to avoid refcount leak...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from octeoncfprobe not releasing a device returned by offinddevicebynode, resulting in a reference count leak...

PT-2025-8288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the pata octeon cf module. The of find device by node function takes a reference, which should be released...

CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6

CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6. A patched version of the package is available...

CVE-2023-30310

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service...

@sap/adp-abap (1.1.37), @sap/adp-cf (1.1.37) +8 more potentially affected by CVE-2025-24876 via @sap/approuter (>=2.6.1, <=15.0.0)

@sap/approuter NPM version =2.6.1, =1.1.36, =1.9.6, =3.4.0, =0.1.0, =3.3.11 Source cves: CVE-2025-24876 Source advisory: GHSA-CPFX-964W-4JVP...