EUVD-2025-53503

Malicious code in light-silver-crane npm...

EUVD-2025-54870

Malicious code in disappointed-red-crane npm...

EUVD-2025-55874

Malicious code in amused-gray-crane npm...

MAL-2025-71742 Malicious code in youthful-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fb39167332bdcc8edd883c1ad7902c38cf08fb61b6c6437f2e8488d935168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60904

Malicious code in additionalcranez3n npm...

EUVD-2025-49040

Malicious code in wetcranez3n npm...

EUVD-2024-34978

Malicious code in bioql PyPI...

Malicious code in test-mlw2-crane-kylie (npm)

The package test-mlw2-crane-kylie was found to contain malicious code...

MAL-2025-35140 Malicious code in test-mlw2-crane-kylie (npm)

The package test-mlw2-crane-kylie was found to contain malicious code...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: ghaudit, opentelemetry-operator, undock, minio-operator, fuse-overlayfs-snapshotter, kwok, sbom-convert, terraform-provider-acme, velero-plugin-for-microsoft-azure, nri-redis, git-sync, falcoctl, xcaddy, step-kms-plugin, q, controller-gen, sqlexporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: ghaudit, opentelemetry-operator, undock, minio-operator, fuse-overlayfs-snapshotter, kwok, sbom-convert, terraform-provider-acme, velero-plugin-for-microsoft-azure, nri-redis, git-sync, falcoctl, xcaddy, step-kms-plugin, q, controller-gen, sqlexporter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, nvidia-nsight-compute-12.8, kubernetes-dashboard-fips, src-fingerprint, flux-source-controller, terraform, opencost, rabbitmq-cluster-operator, overmind, swagger, terraform-provider-acme-fips, wazero-fips, wazero, dex, cadvisor,...

OPENSUSE-SU-2025:14905-1 crane-0.20.3-2.1 on GA media

These are all security issues fixed in the crane-0.20.3-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34679

CVE-2024-34679 affects Crane; versions prior to SMR Nov-2024 Release 1 are vulnerable due to incorrect default permissions, permitting local attackers to access files with the phone privilege. The issue is documented across multiple feeds (Red Hat, NVD, CNVD, etc.) and is addressed by updating Cr...

CVE-2024-34679: Incorrect Default Permissions

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Crane containing an incorrect...