MAL-2025-39448 Malicious code in work-cpu-process840 (npm)

The package work-cpu-process840 was found to contain malicious code...

Malicious code in work-cpu-process240 (npm)

The package work-cpu-process240 was found to contain malicious code...

MAL-2025-39426 Malicious code in work-cpu (npm)

The package work-cpu was found to contain malicious code...

MAL-2025-39439 Malicious code in work-cpu-process240 (npm)

The package work-cpu-process240 was found to contain malicious code...

Malicious code in work-cpu-process520 (npm)

The package work-cpu-process520 was found to contain malicious code...

MAL-2025-29681 Malicious code in process-cpu (npm)

The package process-cpu was found to contain malicious code...

Malicious code in work-cpu-process12 (npm)

The package work-cpu-process12 was found to contain malicious code...

Malicious code in process-cpu (npm)

The package process-cpu was found to contain malicious code...

MAL-2025-39438 Malicious code in work-cpu-process2 (npm)

The package work-cpu-process2 was found to contain malicious code...

Malicious code in process-cpu2 (npm)

The package process-cpu2 was found to contain malicious code...

Malicious code in work-cpu-process320 (npm)

The package work-cpu-process320 was found to contain malicious code...

CVE-2025-8747 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

Linux Distros Unpatched Vulnerability : CVE-2021-28950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in fs/fuse/fusei.h in the Linux kernel before 5.11.8. A stall on CPU can occur because a retry loop continually finds the same bad inode...

Linux Distros Unpatched Vulnerability : CVE-2019-19922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfsquotaus is used e.g., with Kubernetes, allows attackers to cause a denial of service against...

Linux Distros Unpatched Vulnerability : CVE-2025-21965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Validate prevcpu in scxbpfselectcpudfl If a BPF scheduler provides an invalid CPU...

kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, loadmicrocodeamd iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses per-CPU data for the first CPU of each mask...

Security Bulletin: WebSphere Service Registry and Repository (WSSR) is affected by IBM SDK, Java Technology Edition Quarterly CPU - July 2025 - Includes Oracle July 2025 CPU plus CVE-2025-30754

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository, and it uses the IBM® Java SDK. Information about the IBM® Java SDK July 2025 CPU is available in a Security Bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Linux Distros Unpatched Vulnerability : CVE-2023-1390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempti...

Linux Distros Unpatched Vulnerability : CVE-2022-50210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS is selected, cpumaxbitswarn generates a runtime...

Linux Distros Unpatched Vulnerability : CVE-2024-26705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplu...