MAL-2025-18296 Malicious code in deploy-validate-execute-moon-protected (npm)

The package deploy-validate-execute-moon-protected was found to contain malicious code...

MAL-2025-24799 Malicious code in kubernetes-deploy (npm)

The package kubernetes-deploy was found to contain malicious code...

MAL-2025-22212 Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...

MAL-2025-7940 Malicious code in @frozen-team/deploy-log (npm)

The package @frozen-team/deploy-log was found to contain malicious code...

MAL-2025-27876 Malicious code in nu-deploy-sigma-mu-grid (npm)

The package nu-deploy-sigma-mu-grid was found to contain malicious code...

MAL-2025-19091 Malicious code in easy-zero-gamma-promise-deploy (npm)

The package easy-zero-gamma-promise-deploy was found to contain malicious code...

MAL-2025-13962 Malicious code in abstract-permission-root-kappa-deploy (npm)

The package abstract-permission-root-kappa-deploy was found to contain malicious code...

MAL-2025-27418 Malicious code in nf-deploy (npm)

The package nf-deploy was found to contain malicious code...

MAL-2025-14183 Malicious code in air-deploy-air-stub-bash (npm)

The package air-deploy-air-stub-bash was found to contain malicious code...

Malicious code in kubernetes-deploy (npm)

The package kubernetes-deploy was found to contain malicious code...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

GHSA-X6GV-2RVH-QMP6 m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...

CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in Web Deploy. The vulnerability in Web Deploy results from the deserialization of untrusted data. This issue can be exploited by an authorized attacker, enabling them to remotely execute code on the affected system. Web Deploy:...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53772 Web Deploy Remote Code Execution Vulnerability

...

CVE-2025-53772 Web Deploy Remote Code Execution Vulnerability

...

CVE-2025-53772

This CVE affects Microsoft Web Deploy (deserialization of untrusted data) enabling Remote Code Execution over the network. Affected component is Web Deploy’s deserialization pathway, with evidence of in-the-wild and PoC exploits on public GitHub (e.g., stand-alone and IIS WebDeploy PoCs). The vul...

Web Deploy Remote Code Execution Vulnerability

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...