693 matches found
EUVD-2025-176388
Malicious code in sigma-compile-simulate-integer-bash npm...
EUVD-2025-177178
Malicious code in pi-quick-cron-book-compile npm...
EUVD-2025-178449
Malicious code in import-compile-compile-bad-report npm...
EUVD-2025-176183
Malicious code in string-compile-module-benchmark-report npm...
EUVD-2025-179622
Malicious code in compile-validate-sandbox-node-async npm...
MAL-2025-189692 Malicious code in string-compile-module-benchmark-report (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32edf99d2adb837e219033e596267b024daa93bbe2f9e9e2030e20bfffdffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178957
Malicious code in export-zero-orchestrate-zero-compile npm...
Malicious code in water-omega-compile-pipe-book (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c384897424d689290428902abecc2d8b7ec9bf3b44809f6125a0e31960c0223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176991
Malicious code in protected-old-compile-java-enum npm...
EUVD-2025-176590
Malicious code in route-compile-good-private-tree npm...
Eval Injection
Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...
CVE-2025-54471
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...
CVE-2025-54471 NeuVector is shipping cryptographic material into its binary
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...
CVE-2025-54471
The CVE-2025-54471 entry concerns NeuVector where a hard-coded cryptographic key was embedded in the source and replaced at compile time, then used to encrypt sensitive configurations stored by NeuVector. Affected data and configurations could be exposed due to the improper key handling. The prov...
JLSEC-2025-59 libexpat through 2.5.0 allows recursive XML Entity Expansion if `XML_DTD` is undefined at compile...
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...
GHSA-7R7F-9XPJ-JMR7 Ash Framework: Filter authorization misapplies impossible bypass/runtime policies
Summary When using filter authorization, two edge cases could cause the policy compiler/authorizer to generate a permissive filter: 1. Bypass policies whose condition can never pass at runtime were compiled as ORANDcondition, compiledpolicies, NOTcondition. If the condition could never be true at...
SUSE CVE-2023-53631
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-sysman: Fix reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned. This means that we need to dispose it accordingly. Use kobjectput to dispose the...
CVE-2023-53631
CVE-2023-53631 — In Linux kernel, platform/x86 dell-sysman reference leak: if kset_find_obj() finds a duplicate attribute, a reference to that attribute can be returned and may not be disposed, potentially leaking references. Patch note: use kobject_put() to dispose the duplicate attribute. Affec...