CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...

CVE-2025-68926

CVE-2025-68926 – RustFS hardcoded gRPC token authentication bypass . Affected RustFS versions prior to 1.0.0-alpha.78 expose a publicly visible hardcoded token, “rustfs rpc”, used for gRPC authentication on both client and server. The token is non-configurable and identical across deployments, en...

EUVD-2025-203741

In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data destruction and block mapping. The function ext4destroyinlinedatanolock changes the inode data layout by clearing EXT4INODEINLINEDATA and...

AZL-72469 CVE-2025-68261 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data destruction and block mapping. The function ext4destroyinlinedatanolock changes the inode data layout by clearing EXT4INODEINLINEDATA and...

CVE-2025-68261 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()

In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data destruction and block mapping. The function ext4destroyinlinedatanolock changes the inode data layout by clearing EXT4INODEINLINEDATA and...

CVE-2025-68261 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()

In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data destruction and block mapping. The function ext4destroyinlinedatanolock changes the inode data layout by clearing EXT4INODEINLINEDATA and...

CVE-2025-68261

CVE-2025-68261 affects the Linux kernel’s ext4 filesystem. The fix adds i_data_sem protection to ext4_destroy_inline_data_nolock() to close a race between destroying inline data and block mapping. Without protection, ext4_ind_map_blocks() may receive an inode with EXT4_INODE_EXTENTS set, triggeri...

MAL-2025-191371 Malicious code in @voiceflow/secrets-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527df6a20822831f2bc2435e1db61fcc192d163d6a81240078e8e93066dc1235 The package @voiceflow/secrets-provider was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191189 Malicious code in @antstackio/graphql-body-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba2f487fb7920801336b5a03e7300f0ed4b0d6bcb39b1b05ba80549347dcdfa The package @antstackio/graphql-body-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in @clausehq/flows-step-jsontoxml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55490991efb020a37958f1460276c1439d022da66dd47d2799e4e676c1d898a2 The package @clausehq/flows-step-jsontoxml was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191246 Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b458f23284c11d0533df6f7d474554467329282fb52e761f0a654ef8cf69f3e The package @micado-digital/stadtmarketing-kufstein-external was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191235 Malicious code in @ifelsedeveloper/protocol-contracts-svm-idl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd130cc8248982ebd1e7e043ae67c7d32e9c0d7024c47f51d5af0e9fa1c12c29 The package @ifelsedeveloper/protocol-contracts-svm-idl was found to contain malicious code. Source: ghsa-malware...

Malicious code in simplejsonform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512e223b9a2375fd46539f1b0434e092f755c299f20b1d054c538228d266436 The package simplejsonform was found to contain malicious code. Source: ghsa-malware fd81fbb7b9cb8cfc5e4444da9cd2d18ed54ec4b7bb741f0ad95a56ce29a5edd0...

Malicious code in @dev-blinq/cucumber_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a451970465311f6a1d2b9ac8b4713f2f4ff114aa37c12dd0daff6032c8ab6 The package @dev-blinq/cucumberclient was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/angular-trackstar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7a5bb22cafe26b985d8470c0ee240b4b2b201efd50c36c27620ff397d01863 The package @trackstar/angular-trackstar-link was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191314 Malicious code in @silgi/graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0404f9aa498b1721d9dfffbbd0f41cb66d195675fa5a3b9e71fec42153b0e9 The package @silgi/graphql was found to contain malicious code. Source: ghsa-malware 131ca7201ac4ce3abb97a2f5940ad11186f384fb0190ddcaf14d36be20ea0d95...

MAL-2025-191028 Malicious code in @lessondesk/electron-group-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a3fb5a82613479f65dbe89f633c1db69447886fc383477e3e4ae4a31be1ad The package @lessondesk/electron-group-api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191094 Malicious code in flapstacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3e9f1a599a57853dfcaac8296e337783da36d9fbdf2545320a59a3ac12114e The package flapstacks was found to contain malicious code. Source: ghsa-malware 26f6aaeff17a92e5a6df4148bfbcbaf24b10d838e3623a219ea63a5e5440d7fe Any...

MAL-2025-190997 Malicious code in react-native-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96159f9c8f74a56ea1f03322401befd0e090840e21dff7d1cc37db649e8cd58 The package react-native-fetch was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190999 Malicious code in react-native-google-maps-directions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb0fc868ff9cbddc19692db858eff3de665ee0d6dc12a0417f7bd6fb6393a99 The package react-native-google-maps-directions was found to contain malicious code. Source: ghsa-malware...