GHSA-R399-636X-V7F6

creationtimestamp| type| source ---|---|--- 2025-12-23 23:11:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771409372144460...

GHSA-R5QP-7H29-V42W vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-67743

creationtimestamp| type| source ---|---|--- 2025-12-22 23:48:26+00:00| published-proof-of-concept| https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc...

GO-2025-4250 Amazon S3 Encryption Client has a Key Commitment Issue in github.com/aws/amazon-s3-encryption-client-go

Amazon S3 Encryption Client has a Key Commitment Issue in github.com/aws/amazon-s3-encryption-client-go...

GO-2025-4243 Libredesk has Improper Neutralization of HTML Tags in a Web Page in github.com/abhinavxd/libredesk

Libredesk has Improper Neutralization of HTML Tags in a Web Page in github.com/abhinavxd/libredesk...

GO-2025-4247 Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost

Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

CVE-2024-28200

creationtimestamp| type| source ---|---|--- 2025-12-22 18:10:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-28200.yaml 2025-12-24 21:02:56+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mar5xz5owc23...

CVE-2015-8350

creationtimestamp| type| source ---|---|--- 2025-12-22 01:17:33+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2015/CVE-2015-8350.yaml 2025-12-23 21:02:55+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3maonj35a2i2f...

Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

MAL-2026-46 Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

AI Code in the Wild: Measuring Security Risks and Ecosystem Shifts of AI-Generated Code in Modern Software

Large language models LLMs for code generation are becoming integral to modern software development, but their real-world prevalence and security impact remain poorly understood. We present the first large-scale empirical study of AI-generated code AIGCode in the wild. We build a high-precision...

Malicious code in adk-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...

MAL-2025-192619 Malicious code in adk-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...

EUVD-2025-204501

Malicious code in adk-github npm...

Malicious Package

Overview adk-github is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2025-63387

creationtimestamp| type| source ---|---|--- 2025-12-19 08:06:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-63387.yaml 2025-12-20 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44eqgd32r 2025-12-22...

CVE-2025-13307

creationtimestamp| type| source ---|---|--- 2025-12-19 07:05:59+00:00| seen| https://infosec.exchange/users/offseq/statuses/115744961823636580 2025-12-19 07:41:52+00:00| seen| https://gist.github.com/Darkcrai86/cd1792c2fd62567e2cd967ae4c56f9c8 2025-12-19 08:07:53+00:00| seen|...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...

CVE-2025-67844

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub Ap...