MAL-2025-24094 Malicious code in juno-venus-figures-hugo (npm)

The package juno-venus-figures-hugo was found to contain malicious code...

MAL-2025-38587 Malicious code in vortex-archaeogenetics-juno-middleware (npm)

The package vortex-archaeogenetics-juno-middleware was found to contain malicious code...

MAL-2025-24090 Malicious code in juno-outercore-bootes-chariklo (npm)

The package juno-outercore-bootes-chariklo was found to contain malicious code...

MAL-2025-15618 Malicious code in betelgeuse-juno-mantle-init (npm)

The package betelgeuse-juno-mantle-init was found to contain malicious code...

MAL-2025-21190 Malicious code in ganymede-fornax-juno-husky (npm)

The package ganymede-fornax-juno-husky was found to contain malicious code...

Malicious code in juno-autodiscovery-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified...

MAL-2025-4973 Malicious code in juno-autodiscovery-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified...

kernel: coresight: cti: Fix hang in cti_disable_hw()

A context violation bug was found in the Linux kernel's CoreSight CTI Cross Trigger Interface driver in the hardware enable/disable functions. These functions are called from atomic context but attempt runtime PM operations that can sleep when communicating with firmware. This causes "sleeping...

CVE-2025-37819 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode With ACPI in place, gicv2mgetfwnode is registered with the pci subsystem as pcimsigetfwnodecb, which may get invoked at runtime during a PCI host bridge probe. But, the...

PT-2025-20348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the irqchip/gic-v2m component. The gicv2m get fwnode function is registered with the PCI subsystem as pci...

CVE-2025-30653 Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

An Expired Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service DoS.On all Junos OS and Junos OS Evolved platforms, when an MPLS Label-Switched Path LSP is...

CVE-2025-30649 Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.

An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card allows an unauthenticated, network-based attacker, to send specific spoofed packets to cause a CPU Denial of Service DoS...

SUSE CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

GO-2025-3583 Nethermind Juno Potential Denial of Service (DoS) via Integer Overflow in github.com/NethermindEth/juno

Nethermind Juno Potential Denial of Service DoS via Integer Overflow in github.com/NethermindEth/juno...

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072: Integer Overflow or Wraparound

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072

An integer overflow vulnerability exists in Nethermind Juno before version v.12.05 . The issue stems from improper bounds checking within the Sierra bytecode decompression logic located in the cairo-lang-starknet-classes library. A remote attacker can exploit this by submitting a malicious Declar...