Malicious code in squeez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953148095c35441147f1622c4810e0b946e5d120a74cfbe14f1771276a731d7 [email protected] declares a postinstall hook "postinstall": "node install.js" that runs automatically on npm install. install.js imports childprocess, f...

CVE-2026-64393

A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows a local attacker to escalate privileges by manipulating Server Message Block SMB2 SETINFO operations. The system incorrectly uses the ksmbd worker's credentials instead of the original user's credentials when...

CVE-2025-58751

CVE-2025-58751 involves a path traversal issue in Vite Dev Server. The vulnerability affects apps that explicitly expose the Vite dev server to the network (using --host or server.host) and have the public directory feature enabled (default) with a symlink inside the public directory. In versions...

SUSE CVE-2020-6070

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

CVE-2021-30808

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify protected parts of the file system...