Malicious code in phoebe-cryptography-betelgeuse-gacrux (npm)

The package phoebe-cryptography-betelgeuse-gacrux was found to contain malicious code...

MAL-2025-26130 Malicious code in mechatronics-graphql-lepton-cryptography (npm)

The package mechatronics-graphql-lepton-cryptography was found to contain malicious code...

MAL-2025-17737 Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code...

MAL-2025-17739 Malicious code in cryptography-tectonic-hermes-semantic-ui (npm)

The package cryptography-tectonic-hermes-semantic-ui was found to contain malicious code...

MAL-2025-39491 Malicious code in writable-apollo-command-cryptography (npm)

The package writable-apollo-command-cryptography was found to contain malicious code...

MAL-2025-17736 Malicious code in cryptography-blackhole-helios-meteor (npm)

The package cryptography-blackhole-helios-meteor was found to contain malicious code...

MAL-2025-7741 Malicious code in @crypto-lib/utils (npm)

The package @crypto-lib/utils was found to contain malicious code...

Malicious code in cryptography-dagda-mini-css-extract-plugin-jabbah (npm)

The package cryptography-dagda-mini-css-extract-plugin-jabbah was found to contain malicious code...

Malicious code in mechatronics-graphql-lepton-cryptography (npm)

The package mechatronics-graphql-lepton-cryptography was found to contain malicious code...

Malicious code in tectonophysics-abiogenesis-cryptography-elektra (npm)

The package tectonophysics-abiogenesis-cryptography-elektra was found to contain malicious code...

Malicious code in cryptography-markdown-neutronstar-configstore (npm)

The package cryptography-markdown-neutronstar-configstore was found to contain malicious code...

MAL-2025-29135 Malicious code in phoebe-cryptography-betelgeuse-gacrux (npm)

The package phoebe-cryptography-betelgeuse-gacrux was found to contain malicious code...

MAL-2025-34647 Malicious code in tectonophysics-abiogenesis-cryptography-elektra (npm)

The package tectonophysics-abiogenesis-cryptography-elektra was found to contain malicious code...

MAL-2025-17738 Malicious code in cryptography-markdown-neutronstar-configstore (npm)

The package cryptography-markdown-neutronstar-configstore was found to contain malicious code...

Maintainers of Last Resort

Geomys is an organization of professional open source maintainers, focused on a portfolio of critical Go projects. For example, we are two thirds of the Go standard library cryptography maintainers, we provide the FIPS 140-3 validation of the upstream Go Cryptographic Module, and we fund the...

Multichannel Hybrid Quantum Cryptography for Submarine Optical Communications

We present a multichannel hybrid quantum cryptography approach intended for submarine quantum optical communications between Alice and Bob separated a distance beyond the current QKD possibilities, each located on a coastline. It is based on the difficult of a simultaneous access to $M$ optical...

USN-7692-1 request-tracker5 vulnerabilities

It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. CVE-2021-38562 It was discovered that Request Tracker was susceptible to cross-site scripting attacks whe...

SUSE-SU-2025:02773-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts bsc1221107...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...

Allocation of Resources Without Limits or Throttling

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submittin...