5115 matches found
GHSA-7WV6-48J4-HJ3G
creationtimestamp| type| source ---|---|--- 2025-11-25 14:42:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610861120739101...
Malicious code in @pruthvi21/use-debounce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8d11cd0a3abe19ac13cfc1b3bf6a4f1388ac2c6a404090a1264d32de390e8 The package @pruthvi21/use-debounce was found to contain malicious code. Source: ghsa-malware...
Malicious code in @asyncapi/studio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabd7c33d6759f64f573e5cc75565c4669ed790fe45d77d2756d1380b79063f The package @asyncapi/studio was found to contain malicious code. Source: ghsa-malware be3f6f1fe39d5dd5c1ee3ab702e2bee67bc36c54ded865ad25eb2504919b58...
Malicious code in react-native-worklet-functions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed2ae3214c7915580ec4f119fc2fc1ee0e071e2deea48ef419973982180aa9c The package react-native-worklet-functions was found to contain malicious code. Source: ghsa-malware...
Malicious code in eslint-config-zeallat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fe7c28614bd60fe323d92db35df502ed3c1c9076a708815031e1a78311c6e The package eslint-config-zeallat-base was found to contain malicious code. Source: ghsa-malware...
Malicious code in iron-shield-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...
GHSA-9MV9-GW4X-7XW4 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-5J98-MCP5-4VW2 vulnerabilities
Vulnerabilities for packages: node-gyp, py3-jupyterlab, lerna, saf, ts-patch, prism, pulumi, npm...
GHSA-6QV9-48XG-FC7F
creationtimestamp| type| source ---|---|--- 2025-11-21 22:26:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115590036421081698...
GHSA-HC35-H924-8596
creationtimestamp| type| source ---|---|--- 2025-11-21 20:12:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589509189463539...
GHSA-GGXQ-HP9W-J794
creationtimestamp| type| source ---|---|--- 2025-11-21 12:50:48+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3m65d3nacyr2q...
GHSA-46XP-26XH-HPQH
creationtimestamp| type| source ---|---|--- 2025-11-18 22:33:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115573077428976929 2025-11-18 22:33:35+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m5wsaycr7m22...
GHSA-W7XJ-8FX7-WFCH
creationtimestamp| type| source ---|---|--- 2025-11-17 18:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115566520309269245 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2387 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2387 2026-07-11...
@apollo/gateway (>=2.3.0-beta.2, <=2.9.4), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by unknown CVE via @apollo/composition (>=2.3.0, <=2.9.4)
@apollo/composition NPM version =2.3.0, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: unknown CVE Source advisory: OSV:GHSA-M8JR-FXQX-8XX6...
GHSA-GRX8-G27P-8HPP
creationtimestamp| type| source ---|---|--- 2025-11-13 17:55:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543674662995941...
GHSA-QWVM-X4XH-G2QQ
creationtimestamp| type| source ---|---|--- 2025-11-13 16:05:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543241220528720...
CVE-2025-64517
sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...