EUVD-2026-0737

Malicious code in identity-emitter npm...

MAL-2026-17 Malicious code in identity-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e21ae9a5babde61e78ed9c713ec2e845a44ac55b19fb0d9cd48561159bb16a The package identity-emitter was found to contain malicious code...

Amazon Linux 2 : ruby, --advisory ALAS2-2025-2990 (ALAS-2025-2990)

The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2990 advisory. An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter...

Medium: ruby

Issue Overview: An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can...

Malicious code in pentest-event-emitter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6946 Malicious code in pentest-event-emitter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-13965 Malicious code in ac-dom-emitter (npm)

The package ac-dom-emitter was found to contain malicious code...

Malicious code in ac-dom-emitter (npm)

The package ac-dom-emitter was found to contain malicious code...

Malicious code in EventRelayEmitter (npm)

The package EventRelayEmitter was found to contain malicious code...

Malicious code in typespec-ts-interface-emitter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fake-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41407456feff64ada241bb9174752b12b3533a3827629a708296e06c3379fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11804 Malicious code in fake-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41407456feff64ada241bb9174752b12b3533a3827629a708296e06c3379fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11247 Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Heap Buffer Overflow

LibYAML is vulnerable to Heap buffer overflow. The vulnerability is due to the lack of proper initialization of the emitter when yamlemitteremit is called without yamlemitterinitialize. An attacker can exploit this vulnerability by providing specially crafted inputs to trigger the overflow,...

CVE-2024-35326

CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.

PT-2024-26434 · Libyaml · Libyaml

Name of the Vulnerable Software and Affected Versions: libyaml version 0.2.5 Description: The issue is related to a Buffer Overflow vulnerability. It affects the yaml emitter emit function in the /src/libyaml/src/emitter.c file. The manipulation leads to a double-free. Recommendations: For libyam...

OESA-2024-1551 libyaml security update

A C library for parsing and emitting YAML. Security Fixes: A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function yamlemitteremitflowsequenceitem of the file /src/libyaml/src/emitter.c. The manipulation leads to heap-based buffer...

SUSE CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

CVE-2016-2338

An exploitable heap overflow vulnerability was found in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on the tags array length. A specially constructed object passed as elements of tags array can increase th...