5642 matches found
Malicious code in zenobia-spectron-webdriver-express-avior (npm)
The package zenobia-spectron-webdriver-express-avior was found to contain malicious code...
Malicious code in pyxis-link-express-prettier (npm)
The package pyxis-link-express-prettier was found to contain malicious code...
MAL-2025-46088 Malicious code in slides-express-norma-native (npm)
The package slides-express-norma-native was found to contain malicious code...
PCI/ASPM: Fix link state exit during switch upstream function removal
...
bonding: check xdp prog when set bond mode
...
bnxt: properly flush XDP redirect lists
...
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
...
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
...
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
...
nvme-tcp: sanitize request list handling
...
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
...
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: [email protected]" in its release description, is not vulnerable).
...
drm/amd: check num of link levels when update pcie param
...
Linux Distros Unpatched Vulnerability : CVE-2025-38624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: pnvphp: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnvphp driver leaked the allocated IRQ...
Linux Distros Unpatched Vulnerability : CVE-2022-50157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mcpcieinitirqdomains ofgetnextchild returns a node...
Linux Distros Unpatched Vulnerability : CVE-2025-38576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of...
MAL-2025-41981 Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
Malicious code in example-hydrogen-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72ac17540d8cc94d193119aebd535f4becbc637bd1942a5b02a51550239e23c8 The OpenSSF Package Analysis project identified 'example-hydrogen-express' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-41806 Malicious code in example-hydrogen-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72ac17540d8cc94d193119aebd535f4becbc637bd1942a5b02a51550239e23c8 The OpenSSF Package Analysis project identified 'example-hydrogen-express' @ 10.0.1 npm as malicious. It is considered malicious because: - The...