Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that iommufd may add the same hwpt to ioas-hwptlist repeatedly, potentially resulting in a...

PT-2025-52992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s netfilter component related to the nf tables subsystem. A flaw in the chain reference counter handling can lead to an underflow. Specifically, an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the nftables chain reference counter being decremented multiple times on the wrong path, which could lead to a...

The vulnerability of the nft_chain_lookup_byid() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the use of a previously released resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)

@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

Strengthening supply chain security: Preparing for the next malware campaign

The open source ecosystem continues to face organized, adaptive supply chain threats that spread through compromised credentials and malicious package lifecycle scripts. The most recent example is the multi-wave Shai-Hulud campaign. While individual incidents differ in their mechanics and speed,...

aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +568 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.39.0)

diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

a2a-smol-adapter (0.1.0), agent-lifecycle-toolkit (>=0.2.1, <=0.11.0) +115 more potentially affected by CVE-2025-14931 via smolagents (>=0.1.3, <=1.26.0)

smolagents PYPI version =0.1.3, =0.2.1, =0.1.0, =0.1.5, =0.1.6, =0.0.1, =0.3.4, =0.4.8 and more Source cves: CVE-2025-14931 Source advisory: SNYK:PYTHON-SMOLAGENTS-14567305...

3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3323 more potentially affected by CVE-2025-14925 via accelerate (>=0.5.1, <=1.14.0)

accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...

@acabai/android (>=1.0.0, <=2.0.6), @acabai/core (>=1.0.0, <=1.0.6) +942 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)

@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

10minions-engine (>=0.0.1, <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1) +1008 more potentially affected by CVE-2025-68665 via langchain (>=0.0.11, <=0.3.35)

langchain NPM version =0.0.11, =0.0.1, =1.0.0, =0.0.1, =0.0.6, =0.1.4, =3.0.0-beta.65.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.2, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-68665 Source advisory:...

EUVD-2025-204865

Malicious code in supplychaindummytest3 npm...

EUVD-2025-204864

Malicious code in supplychaindummytest4 npm...

Malicious Package

Overview supplychaindummytest2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in supply_chain_dummy_test_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...

Malicious code in supply_chain_dummy_test_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192761 Malicious code in supply_chain_dummy_test_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-204866

Malicious code in supplychaindummytest2 npm...

Malicious code in supply_chain_dummy_test_3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1963b5503ceeb0e8ed806c386f27edc1761eab24549419a8911a00f525b4a4c The package supplychaindummytest3 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192763 Malicious code in supply_chain_dummy_test_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...