Important: Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2

Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2 Kiali 2.17.2, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently. Security Fixes:...

Important: Red Hat Security Advisory: Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1

Kiali 2.11.5 for Red Hat OpenShift Service Mesh 3.1 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Kiali 2.11.5, for Red...

RUSTSEC-2025-0151 `sha-rst` was removed from crates.io for malicious code

This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...

`sha-rst` was removed from crates.io for malicious code

This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...

PT-2025-54756

This attempts to typosquat the existing crate finch cli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reporti...

PT-2025-54755

This crate was used as a dependency by finch cli rust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crate...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4+541730, 12.0 up to and includi...

0xdegenmo-lighter-mcp (0.1.1), 1337x (1.2.5) +14106 more potentially affected by CVE-2025-66471 via urllib3 (>=1.7.1, <=2.5.0)

urllib3 PYPI version =1.7.1, =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-texam 1.1.0 - a16z 0.0.1 and more Source cves: CVE-2025-66471 Source advisory: MEND:CVE-2025-66471...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2025-12196

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2025-12195 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands...

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands...

CVE-2025-12026

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands...

AZL-71516 CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

AZL-71572 CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-23

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...