1410 matches found
MGASA-2025-0322 Updated apache packages fix security vulnerabilities
Apache HTTP Server: modmd ACME, unintended retry intervals. CVE-2025-55753 Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd="..." directives. CVE-2025-58098 Apache HTTP Server: CGI environment...
AZL-71596 CVE-2025-65082 affecting package httpd for versions less than 2.4.66-1
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: redka, ctop, nvidia-container-toolkit, kubernetes-dashboard, prometheus-adapter, kapp, github-mcp-server, dask-gateway, dfc, actions-runner-controller, podinfo, spqr, db-operator, kube-vip-cloud-provider, kuberlr, k8ssandra-client, mesosphere-vsphere-csi, mkcert,...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198977
Malicious code in @ensdomains/ens-test-env npm...
MAL-2025-190932 Malicious code in @ensdomains/ens-test-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3393f85554fe6141b0f72e2f23d0940b102522348e71f60d407dc1471de8f6a9 The package @ensdomains/ens-test-env was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in cross-env-atlas-thuban-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123d82a3501a08158da19efd0782a7ccf3a05e357e6549c278b82303abf98bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-cross-env-photon-superposition (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb2fb8727e1f7724d5accad4dc8d450ac3e5735b535600cb2fee7ed81e14ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-dorado-eslint-config-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-cybernetics-juno-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-flare-hyperion-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080b8e739095288c5b6591e7120a4df20933d6f957db23a93c573d43fdfca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-package-rimraf-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b7e5135953bf968f903061df1ef7829176346806c7e274868c5ef4f82dc597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-vega-native-blazar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b88b84d1c86a43320f37cac5762a0889d3ed25dbab643a50bc6404d8950ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hapi-cross-env-subduction-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40ef79d55d711a81f41e27b0ebbed64b13ba05ad6e7de94c557da9e8c1ea416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...