CVE-2025-62375 vulnerabilities

Vulnerabilities for packages: tekton-chains, tkn...

Malware in swagger-express-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in swagger-express-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df82c080a9679b5742e676bdbeae1f2d4f81a3ba9794c93d5c12deb3df539951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-34839

Malicious code in swagger-express-cli npm...

Malicious Package

Overview swagger-express-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48439 Malicious code in swagger-express-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df82c080a9679b5742e676bdbeae1f2d4f81a3ba9794c93d5c12deb3df539951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ArubaOS 8.10.x < 8.10.0.19 / 8.12.x < 8.12.0.6 / 8.13.x < 8.13.1.0 / 10.4.x < 10.4.1.9 / 10.7.x < 10.7.2.1 Multiple Vulnerabilities (HPESBNW04957)

The version of ArubaOS installed on the remote host is affected by multiple vulnerabilities as referenced in the HPESBNW04957 advisory: - An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating...

Malicious Package

Overview mongose-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview eslint-validation-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview babel-cli-ganache is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview lovable-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Angular CLI. Code issues and vulnerabilities

Angular CLI. is an Angular open source command line interface for Angular. A code issue vulnerability exists in Angular CLI. versions prior to 19.2.18, prior to 20.3.6, and prior to 21.0.0-next.8, which stems from a server-side request forgery issue with the URL parsing mechanism in Angular's...

CVE-2025-37140

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

CVE-2025-58325

An Incorrect Provision of Specified Functionality vulnerability CWE-684 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.10.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.10.0, <=6.10.5) +71 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (12.2.0.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version 12.2.0.jre11 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.sqlserver:mssql-jdbc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.10.0, =6.10.0, =6.10.0, =6.10.0, =0.7.6,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=7.0.0, <=8.4.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=7.0.0, <=7.4.5) +130 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.3.1.jre8-preview, <=12.4.2.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.3.1.jre8-preview, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =1.0.0-beta1, =1.0.0-beta1, =1.0.0-beta1, =1.6.10, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.3.2 and more Source cves: CVE-2025-59250 Source advisory: SNYK:JAVA-COMMICROSOFTSQLSERVER-13821835...

EUVD-2025-34432

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

CVE-2025-37142

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.10.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.10.0, <=6.10.5) +109 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.1.0.jre11-preview, <=12.2.0.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.1.0.jre11-preview, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =2.2.1, =2.2.1, =2.2.1, =2.3.0 - com.buession.cas:buession-cas-throttle-jdbc 2.3.0 and more Source cves: CVE-2025-59250 Source advisory: MEND:CVE-2025-59250...

CVE-2025-37142 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...