EUVD-2025-116176

Malicious code in bellatrix-axios-babel-element-ui npm...

EUVD-2025-121388

Malicious code in terser-triton-element-ui-dione npm...

MAL-2025-143509 Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116905

Malicious code in achernar-geckodriver-element-ui-shelljs npm...

EUVD-2025-116245

Malicious code in babel-element-ui-scripts-pegasus npm...

EUVD-2025-114124

Malicious code in element-ui-version-release-it-deneb npm...

EUVD-2025-111846

Malicious code in leda-element-ui-radiant-sagitta npm...

EUVD-2025-114122

Malicious code in element-ui-xerxes-elara-eris npm...

EUVD-2025-114133

Malicious code in element-ui-pino-pretty-miranda-adonis npm...

Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990785 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 driver core:...

The vulnerability of the ngfx component of the NVIDIA Nsight Graphics debugging tool allows a hacker to execute arbitrary code, increase privileges, and cause service interruptions.

The vulnerability of the ngfx component of the NVIDIA Nsight Graphics debugging tool is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code, increase privileges, and cause service failures...

GHSA-G8JH-VG5J-4H3F Apollo Router Improperly Enforces Renamed Access Control Directives

Summary A vulnerability in Apollo Router allowed for unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes, and @policy that were renamed via @link imports. Router did not enforce renamed access control directives on schema...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989181 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988961 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In itsvpeirqdomainalloc, when itsvpeinit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989458 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix initializing CQ fragments buffer The function initcqfragbuf can be called to...

PT-2025-45072

Name of the Vulnerable Software and Affected Versions Samsung Secure Element versions prior to SMR Nov-2025 Release 1 Description An out-of-bounds write issue exists in the handling of opcodes within the fingerprint trustlet. This allows a local privileged attacker to write to memory outside of...