AI Code in the Wild: Measuring Security Risks and Ecosystem Shifts of AI-Generated Code in Modern Software

Large language models LLMs for code generation are becoming integral to modern software development, but their real-world prevalence and security impact remain poorly understood. We present the first large-scale empirical study of AI-generated code AIGCode in the wild. We build a high-precision...

org.apache.syncope.core:syncope-core-logic (2.0.1), org.apache.syncope.core:syncope-core-migration (2.0.1) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.1 -...

org.apache.syncope.core:syncope-core-logic (2.0.0), org.apache.syncope.core:syncope-core-migration (2.0.0) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0 -...

org.apache.syncope.core:syncope-core-logic (2.0.11), org.apache.syncope.core:syncope-core-migration (2.0.11) +24 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.11)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.11 -...

org.apache.syncope.core:syncope-core-logic (2.1.4), org.apache.syncope.core:syncope-core-persistence-jpa (2.1.4) +25 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.4)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.1.4 -...

org.apache.syncope.core:syncope-core-logic (2.0.2), org.apache.syncope.core:syncope-core-migration (2.0.2) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.2 -...

org.apache.syncope.core:syncope-core-logic (2.1.12), org.apache.syncope.core:syncope-core-persistence-jpa (2.1.12) +25 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.12)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.1.12 -...

org.apache.syncope.core:syncope-core-logic (2.0.7), org.apache.syncope.core:syncope-core-migration (2.0.7) +20 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.7 -...

org.apache.syncope.core:syncope-core-logic (2.0.4), org.apache.syncope.core:syncope-core-migration (2.0.4) +17 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.4)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.4 -...

org.apache.syncope.core:syncope-core-logic (2.0.12), org.apache.syncope.core:syncope-core-migration (2.0.12) +24 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.12)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.12 -...

org.apache.syncope.core:syncope-core-logic (2.0.0-m2), org.apache.syncope.core:syncope-core-persistence-jpa (2.0.0-m2) +7 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0-m2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0-m2 -...

EUVD-2021-13145

Malware in sbrugna...

CVE-2021-26339

Technical details are not publicly available in the provided documents for CVE-2021-26339. Monitor for updates from vendor advisories; no specific affected products, impact, or remediation details are present in the supplied materials.

CVE-2021-26339: Undefined Security Weakness

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers...

Authorization

eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call' of ReGa core logic process, resulting in the ability to start a Denial of Service. Due to Improper Authorization an attacker can obtain a session ID from CVE-2019-9583 or a valid guest/user/admin account can...

CVE-2019-14474

eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call' of ReGa core logic process, resulting in the ability to start a Denial of Service. Due to Improper Authorization an attacker can obtain a session ID from CVE-2019-9583 or a valid guest/user/admin account can...

CVE-2019-14474: Improper Input Validation

eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call' of ReGa core logic process, resulting in the ability to start a Denial of Service. Due to Improper Authorization an attacker can obtain a session ID from CVE-2019-9583 or a valid guest/user/admin account can...

PT-2019-13718

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU3 versions 3.47.15 and prior Description The issue is related to Improper Input Validation in the Call function of the ReGa core logic process. This can lead to a Denial of Service. Additionally, due to Improper Authorization...