799 matches found
CLSA-2025-1754648780 git: Fix of CVE-2024-52006
CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +54 more potentially affected by CVE-2025-54793 via @astrojs/internal-helpers (>=0.6.1, <=0.7.0)
@astrojs/internal-helpers NPM version =0.6.1, =0.0.1, =1.0.0, =12.2.4, =0.12.11, =6.2.1, =4.1.1, =6.2.3, =9.1.3, =8.1.2, =0.1.0, =0.1.0, =1.0.5, =1.25.426-4, =0.0.9, =1.3.0, =1.3.4 and more Source cves: CVE-2025-54793 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-11508621...
Open Redirect
Overview @astrojs/internal-helpers is an Internal helpers used by core Astro packages. Affected versions of this package are vulnerable to Open Redirect the trailing slash redirection logic when handling URLs with double slashes in the path. An attacker can redirect users to arbitrary external...
Malicious code in turborepo-tests-helpers (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6320 Malicious code in turborepo-tests-helpers (npm)
The package communicates with a domain associated with malicious activity...
git: Newline confusion in credential helpers can lead to credential exfiltration in git
A flaw was found in Git. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems, most notably .NET and node.js, interpret single Carriage Return characters as newlines, which render the protections against CVE-2020-5260...
git: Newline confusion in credential helpers can lead to credential exfiltration in git
A flaw was found in Git. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems, most notably .NET and node.js, interpret single Carriage Return characters as newlines, which render the protections against CVE-2020-5260...
git: Newline confusion in credential helpers can lead to credential exfiltration in git
A flaw was found in Git. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems, most notably .NET and node.js, interpret single Carriage Return characters as newlines, which render the protections against CVE-2020-5260...
kernel: ibmvnic: Use kernel helpers for hex dumps
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...
MAL-2025-5783 Malicious code in intel-gdb-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9e59a0db399c7f1fa0d97b250969ebd703c83cb6c7e03b6ab8a3ec34f67746d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: ibmvnic: Use kernel helpers for hex dumps
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...
Malicious code in portal-frontend-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7318f2ff74b7adb55b31d5c2c7e7a7ad130d5d5796972ed5464beaf9e0b6312f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in esb-core-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-5078 Malicious code in esb-core-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added a check for granularity in the dml ceil/floor helpers. Why The wrapper functions for dcnbwceil2 and dcnbwfloor2 should check that granularity is non-zero, to avoid assertion errors and divide-by-zero errors...
SUSE-RU-2025:20362-1 Recommended update for git
This update for git fixes the following issues: - CVE-2024-50349: passwords for trusted sites could be sent to untrusted sites bsc1235600 - CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers bsc1235601...
CVE-2023-30406
Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...
CVE-2020-36624
A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...