2249 matches found
LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived:...
USN-7887-2: Linux kernel (Raspberry Pi) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue. Mitigation Mitigation for this issue is eithe...
EUVD-2025-198918
Malicious code in @postman/postman-collection-fork npm...
Malicious code in @postman/postman-collection-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64948ce72be9099e788f3fd4ab6f5a1a67d0012429ae4e198bc7baa85a5197dd The package @postman/postman-collection-fork was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190907 Malicious code in @postman/postman-collection-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64948ce72be9099e788f3fd4ab6f5a1a67d0012429ae4e198bc7baa85a5197dd The package @postman/postman-collection-fork was found to contain malicious code. Source: google-open-source-security...
Malicious code in token.js-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...
MAL-2025-190785 Malicious code in token.js-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...
EUVD-2025-198753
Malicious code in token.js-fork npm...
expr-eval vulnerable to Prototype Pollution
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204 CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204
The expr-eval and expr-eval-fork npm packages are vulnerable to Prototype Pollution due to improper handling of JavaScript prototype-based inheritance in the eval interface . An attacker with access to the express eval interface can exploit this flaw to achieve arbitrary code execution . This vul...
EUVD-2025-197614
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204 CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204 CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
EUVD-2025-180437
Malicious code in analyze-char-fork-theta-kernel npm...