Security Bulletin: Due to IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities [CVE-2025-48976, CVE-2025-30204, CVE-2025-1137].

Summary Execute privileged command and denial of service vulnerabilities found in IBM Storage Scale previously known as IBM Spectrum Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.6.1 and IBM Cloud Pak System v2.3.5.1 Vulnerability Details...

EUVD-2025-5954

Malicious code in bioql PyPI...

AZL-77514 CVE-2025-30204 affecting package keda for versions less than 2.4.0-32

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-52183 CVE-2024-51744 affecting package cert-manager for versions less than 1.12.15-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52216 CVE-2024-51744 affecting package etcd for versions less than 3.5.18-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

go-json-iterator:fuzz_json: Crash in reflect.Value.Elem

Detailed Report: https://oss-fuzz.com/testcase?key=4977879394156544 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001e46dafc Crash State: reflect.Value.Elem Sanitizer...

PT-2021-23690 · Gjson +1 · Gjson +1

Name of the Vulnerable Software and Affected Versions: GJSON versions prior to 1.9.3 Description: The issue allows a ReDoS regular expression denial of service attack. GJSON is a Go package that provides a fast and simple way to get values from a JSON document. A maliciously crafted path can caus...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5305722079412224 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4548583476035584 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

go-json-iterator:fuzz_json: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5527897638043648 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000031c8085 Crash State: NULL Sanitizer: address ASAN...

go-json-iterator:fuzz_json: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5645693727408128 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffd6ffb2e6b Crash State: NULL Sanitizer: address ASAN...

go-json-iterator:fuzz_json: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6333100707676160 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff9c031e6b Crash State: NULL Sanitizer: address ASAN...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5179688116551680 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...