GHSA-892P-PQRR-HXQR

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14526...

GHSA-7MPF-6GG2-2FJP

creationtimestamp| type| source ---|---|--- 2025-04-30 18:14:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14112...

GHSA-CV2P-32V3-VHWQ

creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13077...

CVE-2025-46567

creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...

GHSA-5V2H-R2CX-5XGJ

creationtimestamp| type| source ---|---|--- 2025-04-22 19:03:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12954...

GHSA-H5G4-PPWX-48Q2

creationtimestamp| type| source ---|---|--- 2025-04-22 18:03:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12926...

GHSA-8C28-5MP7-V24H

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...

GHSA-H4Q8-96P6-JCGR

creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12060...

Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-58H4-9M7M-J9M4

creationtimestamp| type| source ---|---|--- 2025-04-08 13:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10903...

CVE-2025-28269

creationtimestamp| type| source ---|---|--- 2025-04-06 18:13:23+00:00| published-proof-of-concept| https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx...

CVE-2025-71319

creationtimestamp| type| source ---|---|--- 2025-04-02 15:04:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m5qc-5hw7-8vg7 2026-07-01 15:14:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsnpvgpw2o 2026-07-02 23:55:28+00:00| seen|...

GHSA-W34W-FVP3-68XM

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9944...

GHSA-6PHG-4WMQ-H5H3

creationtimestamp| type| source ---|---|--- 2025-03-26 16:25:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8883...

GHSA-RPF7-G4XH-84V9

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8767...

GHSA-QR4Q-6H3M-H3G7

creationtimestamp| type| source ---|---|--- 2025-03-11 13:39:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7130...

GHSA-PWHH-Q4H6-W599

creationtimestamp| type| source ---|---|--- 2025-02-27 15:30:14+00:00| published-proof-of-concept| Telegram/18aGabcqT47rhbAtmBCfjbslvF7WShvEcg6GVkQNwRNaIHA...

GHSA-VFXC-QG3V-J2R5

creationtimestamp| type| source ---|---|--- 2025-02-25 18:22:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5342...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

CVE-2022-21671

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...