EUVD-2025-8379

Malicious code in bioql PyPI...

EUVD-2025-18743

Malicious code in bioql PyPI...

EUVD-2025-29631

Malicious code in bioql PyPI...

EUVD-2025-9861

Malicious code in bioql PyPI...

Firefox -- JIT miscompilation in the JavaScript Engine

[email protected] reports: JIT miscompilation in the JavaScript Engine: JIT component...

WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode

...

CVE-2025-58749 WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...

Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane

AI agents are rapidly becoming a core part of the enterprise, being embedded across enterprise workflows, operating with autonomy, and making decisions about which systems to access and how to use them. But as agents grow in power and autonomy, so do the risks and threats. Recent studies show 80%...

WebAssembly Micro Runtime 安全漏洞

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...

PT-2025-38054

Name of the Vulnerable Software and Affected Versions: WebAssembly Micro Runtime WAMR versions prior to 2.4.2 Description: WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. When running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembl...

DEBIAN-CVE-2025-38723

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpfintjitcompile skips JIT context initialization which essentially skips offset calculation leaving outoffset = -1, so the jmpoffset in emitbpftailcall is...

CVE-2025-38723

CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...

Malicious code in just-next-tick (npm)

The package just-next-tick was found to contain malicious code...

Malicious code in just-function-partial (npm)

The package just-function-partial was found to contain malicious code...

Malicious code in generator-just (npm)

The package generator-just was found to contain malicious code...

Malicious code in just-array-flatten (npm)

The package just-array-flatten was found to contain malicious code...

Malicious code in just-the-docs (npm)

The package just-the-docs was found to contain malicious code...

Malicious code in just-array-union (npm)

The package just-array-union was found to contain malicious code...

Malicious code in just-a-server (npm)

The package just-a-server was found to contain malicious code...

Malicious code in just-function-curry (npm)

The package just-function-curry was found to contain malicious code...