armory_cli (>=0.3.3 <=0.3.28), armory_lib (>=0.1.0 <=0.3.28) +157 more potentially affected by unknown CVE via crypto-hash (=0.3.4)

crypto-hash CARGO version =0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-hash and may be impacted: - armorycli =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.23.0, =0.1.0, =0.5.0, =0.3.10, =0.1.0, =0.2.2, =0.6.3 and more Source cve...

kubei

Kubei is a flexible Kubernetes runtime scanner that scans worker nodes and Kubernetes nodes' images, providing accurate vulnerability assessments. It is a vulnerability scanner and CIS Docker scanner. The repository contains various files, including .dockerignore, .families.yaml,...

ch.epfl.bluebrain.nexus:cli_2.13 (>=1.5.0 <=1.6.1), ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.9.0-M1 <=1.9.0-M12-2) +513 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=2.0.0 <=2.5.12)

co.fs2:fs2-io2.13 MAVEN version =2.0.0, =1.5.0, =1.9.0-M1, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.5.0, =0.3.0, =0.22.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =2.1.0, =2.7.2 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669992...

ch.epfl.bluebrain.nexus:cli_2.13 (>=1.5.0 <=1.6.1), ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.9.0-M1 <=1.9.0-M12-2) +518 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=1.1.0-M1 <=2.5.12)

co.fs2:fs2-io2.13 MAVEN version =1.1.0-M1, =1.5.0, =1.9.0-M1, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.5.0, =0.3.0, =0.22.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =2.1.0, =2.7.2 and more Source cves: CVE-2025-58369 Source advisory: OSV:GHSA-RRW2-PX9J-QFFJ...

Malicious code in fermiparadox-materialize-cli-planckscale (npm)

The package fermiparadox-materialize-cli-planckscale was found to contain malicious code...

Malicious code in blitz-rollup-scripts-cli (npm)

The package blitz-rollup-scripts-cli was found to contain malicious code...

MAL-2025-43826 Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Malicious code in cli-colors-enceladus-izar (npm)

The package cli-colors-enceladus-izar was found to contain malicious code...

Malicious code in cli-shelljs-exoplanetology-indus (npm)

The package cli-shelljs-exoplanetology-indus was found to contain malicious code...

Malicious code in void-stratosphere-polaris-cli (npm)

The package void-stratosphere-polaris-cli was found to contain malicious code...

Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Malicious code in nodemon-cli-umbriel-uranology (npm)

The package nodemon-cli-umbriel-uranology was found to contain malicious code...

MAL-2025-43829 Malicious code in cli-shelljs-exoplanetology-indus (npm)

The package cli-shelljs-exoplanetology-indus was found to contain malicious code...

MAL-2025-43827 Malicious code in cli-colors-enceladus-izar (npm)

The package cli-colors-enceladus-izar was found to contain malicious code...

MAL-2025-46546 Malicious code in void-stratosphere-polaris-cli (npm)

The package void-stratosphere-polaris-cli was found to contain malicious code...

MAL-2025-43828 Malicious code in cli-public-proxima-oberon (npm)

The package cli-public-proxima-oberon was found to contain malicious code...

MAL-2025-45338 Malicious code in nodemon-cli-umbriel-uranology (npm)

The package nodemon-cli-umbriel-uranology was found to contain malicious code...

@agentforce/adk (>=0.9.0 <=0.12.1), @bgord/bun (>=0.11.2 <=1.0.1) +38 more potentially affected by CVE-2025-58362 via hono (>=4.8.0 <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0, =1.3.2, =4.0.0-alpha.5, =1.3.3, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.6.3 and more Source cves: CVE-2025-58362 Source advisory: OSV:GHSA-9HP6-4448-45G2...

[SECURITY] Fedora 41 Update: docker-buildx-0.27.0-1.fc41

Docker CLI plugin for extended build capabilities with BuildKit...

Linux Distros Unpatched Vulnerability : CVE-2025-49005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, ...