MAL-2025-5462 Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MGASA-2025-0194 Updated yarnpkg packages fix security vulnerabilities

CVE-2024-37890 yarnpkg: denial of service when handling a request with many HTTP headers. CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification. CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file And other vulnerabilities in...

Can One Safety Loop Guard Them All? Agentic Guard Rails for Federated Computing

We propose Guardian-FC, a novel two-layer framework for privacy preserving federated computing that unifies safety enforcement across diverse privacy preserving mechanisms, including cryptographic back-ends like fully homomorphic encryption FHE and multiparty computation MPC, as well as statistic...

org.webjars.bowergithub.advanced-rest-client:code-mirror (=2.0.1), org.webjars.bowergithub.angular-ui:ui-codemirror (>=0.1.6 <=0.3.0) potentially affected by CVE-2025-6493 via org.webjars.bowergithub.components:codemirror (>=4.13.0 <=5.65.12)

org.webjars.bowergithub.components:codemirror MAVEN version =4.13.0, =0.1.6, =0.3.0 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-10494093...

Malicious code in handelsblatt-hypesignals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1041cb10e755d31aaf87160a55cd21a723840476f966117b7895256ef06ae13e Any computer that has this package installed or running should be considered...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Cluster component: General database management systems related to MySQL Cluster are vulnerable to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

com.farao-community.farao:csa-runner-api (>=1.2.1 <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.2.1 <=2.6.1) +243 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-computation (>=6.0.0-RC1 <=6.7.1)

com.powsybl:powsybl-computation MAVEN version =6.0.0-RC1, =1.2.1, =1.2.1, =4.6.1, =4.6.1, =4.6.0, =4.6.1, =4.6.0, =4.6.1, =4.6.1, =4.6.1, =4.6.1, =4.6.0, =4.6.1, =4.6.1, =4.6.1, =5.0.0 and more Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442141...

com.farao-community.farao:csa-runner-app (>=1.2.1 <=2.6.1), com.farao-community.farao:farao-crac-creator-cim (>=4.6.1 <=5.0.0) +41 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-cgmes-model (>=6.0.0-RC1 <=6.7.1)

com.powsybl:powsybl-cgmes-model MAVEN version =6.0.0-RC1, =1.2.1, =4.6.1, =4.6.1, =1.27.0, =1.27.0, =1.18.0, =1.18.0, =1.14.0, =1.18.0, =6.1.0, =5.0.1, =6.1.0, =5.0.1, =6.5.0 and more Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442139...

com.farao-community.farao:csa-runner-api (>=1.2.1 <=2.6.1), com.farao-community.farao:csa-runner-app (>=0.0.1 <=2.6.1) +345 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (>=1.0.0 <=6.7.1)

com.powsybl:powsybl-commons MAVEN version =1.0.0, =1.2.1, =0.0.1, =4.1.4, =1.0.0, =3.9.3, =1.0.0, =3.7.1, =2.0.0, =3.0.0, =2.4.1, =3.9.0, =4.5.0, =3.3.3, =3.6.0, =5.0.0 and more Source cves: CVE-2025-48058 Source advisory: OSV:GHSA-RQPX-F6RC-7HM5...

com.farao-community.farao:csa-runner-api (>=1.3.1 <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1 <=2.6.1) +173 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=6.3.0 <=6.7.1)

com.powsybl:powsybl-math MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-47771 Source advisory: SNYK:JAVA-COMPOWSYBL-10442148...

com.farao-community.farao:csa-runner-api (>=1.2.1 <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.2.1 <=2.6.1) +268 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (>=6.0.0-RC1 <=6.7.1)

com.powsybl:powsybl-commons MAVEN version =6.0.0-RC1, =1.2.1, =1.2.1, =4.6.1, =4.6.1, =4.6.0, =4.6.1, =4.6.0, =4.6.1, =4.6.1, =4.6.1, =4.6.1, =4.6.0, =4.6.1, =4.6.1, =4.6.1, =5.0.0 and more Source cves: CVE-2025-47293 Source advisory: SNYK:JAVA-COMPOWSYBL-10442135...

[SECURITY] Fedora 42 Update: python-setuptools-74.1.3-7.fc42

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

NVIDIA NVDebug tool 安全漏洞

NVIDIA NVDebug tool is a debugging tool from NVIDIA. A security vulnerability exists in NVIDIA NVDebug tool, which stems from a vulnerability that could allow an attacker to access restricted components, which could lead to information disclosure...

Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

MAL-2025-5004 Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

TencentOS Server 4: java-11-konajdk (TSSA-2024:0587)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0587 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: velero, runc, kubernetes-dashboard-auth, mongodb-kubernetes-operator, linkerd2-proxy-init, cloud-sql-proxy, nri-cassandra, dockerize, knative-client, nri-consul, kube-bench, direnv, helm, s5cmd, newrelic-nri-statsd, apko, vendir, temporal-ui-server,...