OESA-2025-2782 golang security update

. Security Fixes: The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://::1/". IPv4 addresses...

CLSA-2025-1764677929 libsoup: Fix of 2 CVEs

CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...

RLSA-2023:5849 Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 nodejs: integrity checks according t...

nodejs:18 security update

An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...

nodejs:18 security update

An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...

RLSA-2023:5869 Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 A Rocky Enterprise Software Foundati...

RockyLinux 9 : nodejs:18 (RLSA-2023:5849)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5849 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 nodejs: integrity checks according to...

RockyLinux 8 : nodejs:18 (RLSA-2023:5869)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5869 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 A Rocky Enterprise Software Foundation...

EUVD-2025-201069

Malicious code in elf-stats-nutmeg-cookie-584 npm...

Malicious code in elf-stats-nutmeg-cookie-584 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1334d03a120a0289bcce43f0495464bcd6d22e64411ee175355ea10101701835 The package elf-stats-nutmeg-cookie-584 was found to contain malicious code...

MAL-2025-192224 Malicious code in elf-stats-nutmeg-cookie-584 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1334d03a120a0289bcce43f0495464bcd6d22e64411ee175355ea10101701835 The package elf-stats-nutmeg-cookie-584 was found to contain malicious code...

Malicious code in elf-stats-snuggly-cookie-673 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06a347e5976fcb03701eac38b531283cc45153381b5e9a1bf4e8518a8b7f444 The package elf-stats-snuggly-cookie-673 was found to contain malicious code...

Malicious code in elf-stats-glittering-cookie-772 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0465cd7c6dd7c560b34abf275f7ff7ffa45436514b7f8e26d925544ef631a88 The package elf-stats-glittering-cookie-772 was found to contain malicious code...

EUVD-2025-200803

Malicious code in elf-stats-snuggly-cookie-673 npm...

MAL-2025-192149 Malicious code in elf-stats-snuggly-cookie-673 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06a347e5976fcb03701eac38b531283cc45153381b5e9a1bf4e8518a8b7f444 The package elf-stats-snuggly-cookie-673 was found to contain malicious code...

MAL-2025-192058 Malicious code in elf-stats-glittering-cookie-772 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0465cd7c6dd7c560b34abf275f7ff7ffa45436514b7f8e26d925544ef631a88 The package elf-stats-glittering-cookie-772 was found to contain malicious code...

EUVD-2025-200894

Malicious code in elf-stats-glittering-cookie-772 npm...

📄 phpIPAM 1.5.1 SQL Injection

phpIPAM version 1.5.1 suffers from a remote SQL injection vulnerability. Exploit Title: phpIPAM 1.5.1 - SQL Injection Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/phpipam/phpipam/ Software Link: https://github.com/phpipam/phpipam/ Version: 1.5.1 Tested on: Windo...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libsoup (UTSA-2025-991030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991030 advisory. A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the...

SUSE SLED15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2025:4264-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4264-1 advisory. - CVE-2024-35221: Fixed remote DoS via YAML manifest bsc1225905 - CVE-2024-47220: Fixed HTTP request smuggling...