MAL-2025-184950 Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184934 Malicious code in sonic-kas-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd879d51f7729decd647411d9487605e60a885059e38ba5be96aafdb0d7fa67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140011

Malicious code in namacida-minuday-kas npm...

Malicious code in ksai-kas-ahakaoliaaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bff598dfe158fad783c53b6eb2f50467b163ec46820f144dffd6ec52474443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-kas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97f2085ef4f3bd1c37ec2e11539e6fa1f3b59ad59d4d2a718c3538795a2db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140649

Malicious code in ksai-kas-ahakaoliaaji npm...

EUVD-2024-47151

Malicious code in bioql PyPI...

kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in rtsxusbmspollcard+0x159/0x20...

CVE-2024-5469

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

SUSE CVE-2022-49078

In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4decompresssafepartial read out of bound When partialDecoding, it is EOF if we've either filled the output buffer or can't proceed with reading an offset for following match. In some extreme corner cases when compresse...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server, temporal-ui-server-fips, temporal-ui-server, temporal...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal, temporal-ui-server...

CVE-2025-1243 vulnerabilities

Vulnerabilities for packages: temporal-server, temporal, temporal-ui-server...

DEBIAN-CVE-2025-21652

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...

BIT-GITLAB-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469

Removed by vendor...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469

CVE-2024-5469 affects GitLab CE/EE KAS. A DoS via crafted gRPC requests crashes KAS, impacting all versions 16.10.0–16.10.5 and 16.11.0–16.11.2 (pre-16.10.6 and pre-16.11.3). Exploit details are not provided in the documents; no active exploit specifics are given here. Connected notes indicate Gi...