Security Bulletin: Security Vulnerabilities in Third-Party Node.js Packages Used by IBM Rhapsody Systems Engineering

Summary Security vulnerabilities were identified in the product's Node.js dependencies. The issue has been mitigated by removing the vulnerable packages and updating dependencies to secure versions. Vulnerability Details CVEID:CVE-2026-29087 DESCRIPTION: @hono/node-server allows running the Hono...

Security Bulletin: IBM Rhapsody Systems Engineering is vulnerable to prototype pollution abuse

Summary A security vulnerability was identified in the axios package used in IBM Rhapsody Systems Engineering. The issue has been resolved and patched. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and...

Security Bulletin: IBM Rhapsody Systems Engineering is using qs-6.14.0 which is vulnerable to CVE-2025-15284

Summary A security vulnerability was identified in the QS package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Vulnerability Details CVEID:CVE-2025-15284 DESCRIPTION: Improper...

Security Bulletin: IBM Rhapsody Systems Engineering is using @modelcontextprotocol/sdk-1.15.0 which is vulnerable to CVE-2026-0621

Summary A security vulnerability was identified in the @modelcontextprotocol/sdk package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Vulnerability Details CVEID:CVE-2026-0621...

EUVD-2017-10478

Malware in sbrugna...

EUVD-2016-10499

Malware in sbrugna...

EUVD-2016-10498

Malware in sbrugna...

EUVD-2016-9798

Malware in sbrugna...

EUVD-2017-10303

Malware in sbrugna...

EUVD-2017-10265

Malware in sbrugna...

EUVD-2016-9800

Malware in sbrugna...

EUVD-2018-12269

Malware in sbrugna...

EUVD-2017-10256

Malware in sbrugna...

EUVD-2018-12035

Malware in sbrugna...

EUVD-2016-9799

Malware in sbrugna...

EUVD-2016-10495

Malware in sbrugna...

EUVD-2016-10497

Malware in sbrugna...

CVE-2025-33020

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information...

CVE-2025-33076

CVE-2025-33076 affects IBM Engineering Systems Design Rhapsody, specifically versions 9.0.2, 10.0, and 10.0.1. The vulnerability is a stack-based buffer overflow caused by improper bounds checking, allowing a local user to overflow a buffer and execute arbitrary code. The IBM Security Bulletin co...

PT-2025-30591 · Ibm · Engineering Systems Design Rhapsody

Name of the Vulnerable Software and Affected Versions: IBM Engineering Systems Design Rhapsody versions 9.0.2, 10.0, and 10.0.1 Description: IBM Engineering Systems Design Rhapsody is susceptible to a stack-based buffer overflow due to insufficient bounds checking. A local user can exploit this...