CVE-2025-68478

creationtimestamp| type| source ---|---|--- 2025-12-19 14:44:56+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8...

Malicious code in viktor-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f588bf6164c41e993943c30ac7d1a25c88c3de79469bb1a5d1a8a43448f22c31 The package viktor-xml-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b7bb5e0b1f8fa179dfab5781def80ab5479ef699c58edf3b1e998c8fe7228f The package viktorparserctf2 was found to contain malicious code. Source: ghsa-malware 1b82b1d902169dd21a91960198cb2313aeea0d1a5d0db64c81d289a9632cd5...

GHSA-5CGR-J3JF-JW3V

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

GHSA-9XWC-HFWC-8W59

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

EUVD-2025-204011

Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these headers when unsuspecting users connect to...

GHSA-R7V6-MFHQ-G3M2

creationtimestamp| type| source ---|---|--- 2025-12-16 13:41:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729529089646381 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...

GHSA-CPWW-GWGC-P72R

creationtimestamp| type| source ---|---|--- 2025-12-16 13:38:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729519990865426 2026-01-07 21:06:23+00:00| published-proof-of-concept| Telegram/i8bForBP1dZBDut81Rl3-X-SxUGQomBUf7AnX6qGlfBFF0o...

GHSA-W37M-7FHW-FMV9 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

Malicious code in gfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813943ebd3c7e53be5309757e509dc22587aab81ded149ba9b56b37e87a4dd9 The package gfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +155 more potentially affected by unknown CVE via next (>=16.0.0, <=16.0.8)

next NPM version =16.0.0, =1.0.0, =0.3.128, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =1.0.4186, =0.1.0, =0.1.0, =0.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MWV6-3258-Q52C...

@adenta/cms (>=0.0.6, <=1.1.1-0), @alisonquinter17/alieta-ui (0.1.0) +126 more potentially affected by unknown CVE via next (>=15.4.0-canary.17, <=15.4.8)

next NPM version =15.4.0-canary.17, =0.0.6, =0.1.0, =1.2.4-main.7f918ee.29, =0.2.0, =1.0.0, =1.0.0-beta.3, =1.0.2, =0.0.1, =0.0.4, =0.0.1, =1.1.0, =0.1.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MWV6-3258-Q52C...

GHSA-J8G6-5GQC-MQ36

creationtimestamp| type| source ---|---|--- 2025-12-11 17:17:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702068572706362...

GHSA-M7F9-QW7F-WHP3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MR6F-H57V-RPJ5

creationtimestamp| type| source ---|---|--- 2025-12-10 22:38:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115697668298607011...

GHSA-XRQC-7XGX-C9VH vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GHSA-HXP3-63HC-5366

creationtimestamp| type| source ---|---|--- 2025-12-09 21:49:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691812757707363...

GHSA-XRQC-7XGX-C9VH

creationtimestamp| type| source ---|---|--- 2025-12-09 20:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691600473250373...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: az, semgrep, nvidia-nsight-compute-13.3, kubeflow-pipelines, dask-kubernetes, kubeflow-jupyter-web-app, openstack-kolla-toolbox-2025.2, ggshield, azure-functions-host, openstack-kolla-toolbox-2025.2-fips, nemo, datadog-agent, jupyter-base-notebook, pgadmin4,...