Malicious code in @relyt/claude-context-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7128c912d51fd365b62035c31a922a12b13bbc16e66c119bc931281f60d29922 The package @relyt/claude-context-mcp was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199147

Malicious code in @relyt/claude-context-core npm...

Malicious code in @relyt/claude-context-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c316b01a92bfd324ed27916a84ad109a9a198650509ea633aaa7ab97e5afcf9 The package @relyt/claude-context-core was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199174

Malicious code in @lessondesk/react-table-context npm...

Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191031 Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190992 Malicious code in react-keycloak-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf006e02e42a934dd475393f106cc2cb39abb0f8438ee1a09d63d50649221c7 The package react-keycloak-context was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199051

Malicious code in react-keycloak-context npm...

Malicious code in react-keycloak-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf006e02e42a934dd475393f106cc2cb39abb0f8438ee1a09d63d50649221c7 The package react-keycloak-context was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198708

NULL pointer dereference in coapdtlsgeneratecookie in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetSSLCTX to return NULL...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the tlsverifycallback function. An attacker can cause the application to crash by sending a specially crafted DTLS handshake that results in SSLgetexdataX509STORECTXidx returning -1. Remediation...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the coapdtlsgeneratecookie function. An attacker can cause the application to crash by sending a specially crafted DTLS handshake that results in SSLgetSSLCTX returning NULL. Remediation Upgrade libcoap to...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

ECHO-7DF6-6E5E-506B

Bulletin has no description...

Redis: Redis: Authenticated users can execute LUA scripts as a different user

A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...

PT-2025-47899

Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-65498

NULL pointer dereference in coapdtlsgeneratecookie in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetSSLCTX to return NULL...