32303 matches found
CVE-2025-53773
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2025-55192
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
GHSA-XCCG-43HX-C846
creationtimestamp| type| source ---|---|--- 2025-08-14 17:02:59+00:00| seen| Telegram/2aiCe15jUeeRDLOadJeMH7VKDKBtBq9vNFQ5Yzu3yuNw...
CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
CVE-2025-55192
HomeAssistant-Tapo-Control exposes a code injection vulnerability in its GitHub Actions workflow .github/workflows/issues.yml, prior to commit 2a3b80f. The workflow directly inserts user-controlled content from the issue body (github.event.issue.body) into a Bash conditional without proper saniti...
Malicious Package
Overview github.com/ordinarymea/tnsrids is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...
GHSA-6MM5-R7WC-H7PM vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-6Q9Q-G6RV-XHJC vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-C9RV-F9QQ-JJVF vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-Q9RX-VPRP-MMRF vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-F8W7-HH6G-979X vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-522C-XXVJ-5JHW vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-11-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9...
GHSA-X58F-J988-8PPF vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-J474-59J6-7C6R vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-FMM9-3JQX-2M93 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-93P8-MVM4-C85W vulnerabilities
Vulnerabilities for packages: openjdk...