SUSE CVE-2026-34182

Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilities may achieve...

CVE-2026-34182

Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilities may achieve...

PT-2026-47831

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers. This allows attackers to achiev...

Astra Linux - уязвимость в libgit2

A issue was discovered in libgit2 before versions 0.28.4 and 0.9x before version 0.99.0. path.c improperly handles equivalent filenames that exist due to NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...

Astra Linux - уязвимость в libgit2

A issue was discovered in libgit2 before versions 0.28.4 and 0.9x before version 0.99.0. The checkout.c file mishandles equivalent filenames that exist due to NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353...

`unpack_in` can chmod arbitrary directories by following symlinks

In versions 0.6.0 and earlier of astral-tokio-tar, the unpackin API could inadvertently modify the permissions of external i.e. non-archive directories outside of the archive. An attacker could use this to contrite a tar archive that maliciously changes directory permissions outside of its intend...

PT-2026-26429

Name of the Vulnerable Software and Affected Versions Spring Boot versions prior to 4.0.3 Spring Boot versions prior to 3.5.11 Spring Boot versions prior to 3.4.15 Description Spring Boot applications utilizing the Actuator feature may be susceptible to an authentication bypass issue. This occurs...

EUVD-2025-99257

Malicious code in equivalentnightingalez3n npm...

EUVD-2025-92229

Malicious code in equivalentswallowz3n npm...

Malicious code in equivalent_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3514671470659144e48dfb5e328932f463412d5e7693270e0bdc6e8763640cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82032

Malicious code in equivalenttapirdumbs npm...

EUVD-2025-64272

Malicious code in equivalent-blue-parrot npm...

EUVD-2025-64269

Malicious code in equivalenttroutz3n npm...

MAL-2025-94285 Malicious code in equivalent_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb1db5083a69e57d635f65c954f8cdb1d26d2be73826782ecf13a2e52d8df2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54577

Malicious code in equivalent-harlequin-shrew npm...

EUVD-2025-54576

Malicious code in equivalent-rose-caterpillar npm...

EUVD-2025-54575

Malicious code in equivalent-tan-ptarmigan npm...

Malicious code in equivalent_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1573034cb16288116a4d9db1992c47f005cf642fc36aa22b2e52c04769993ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59890

Malicious code in equivalentdovez3n npm...