Lucene search
+L

23954 matches found

OSV
OSV
added 2025/10/29 11:16 p.m.7 views

MAL-2025-49043 Malicious code in sort-keys-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fd040f6b48ad761cb38f7172921ad9f1a82689c1ac612e6f936271eaf1f08d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/10/29 11:16 p.m.2 views

Malicious Package

Overview sort-keys-fix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2025/10/29 11:16 p.m.10 views

CVE-2025-58188

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

7.5CVSS0.00356EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/29 11:16 p.m.14 views

AZL-69275 CVE-2025-58188 affecting package golang 1.26.0-1

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

7.5CVSS7.1AI score0.00356EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 11:16 p.m.11 views

AZL-78915 CVE-2025-58188 affecting package golang 1.25.7-1

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

7.5CVSS7.1AI score0.00356EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/29 10:49 p.m.6 views

EUVD-2025-36798

Malicious code in typescript-sort-keys npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:49 p.m.6 views

Malicious code in skyscanner-with-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ee691d4871e49dccfe0f756848ea5ef13360c6ff86d64bc7ddb718ac5d423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/10/29 10:49 p.m.4 views

Malicious Package

Overview typescript-sort-keys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:49 p.m.8 views

Malicious code in typescript-sort-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9936ccc8347b00204eae711ecf8b26d6d9444300021678c11327776463123325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/10/29 10:49 p.m.7 views

MAL-2025-49060 Malicious code in typescript-sort-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9936ccc8347b00204eae711ecf8b26d6d9444300021678c11327776463123325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:47 p.m.5 views

Malicious code in durablefunctionsmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6bcceee8fd7c48b4e3a6785a12fbee378528263f9f948def2884033173d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/10/29 10:46 p.m.2 views

Malicious Package

Overview sort-keys-plus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:46 p.m.8 views

Malicious code in sort-keys-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1259b4a5ee855447736b9ec48a05b35f1c23446060a98aa5f1fc29a0e825db09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/10/29 10:46 p.m.6 views

MAL-2025-49044 Malicious code in sort-keys-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1259b4a5ee855447736b9ec48a05b35f1c23446060a98aa5f1fc29a0e825db09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
EUVD
EUVD
added 2025/10/29 10:46 p.m.4 views

EUVD-2025-36854

Malicious code in sort-keys-plus npm...

6.6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 10:10 p.m.3 views

CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

6.6AI score0.00356EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/29 10:10 p.m.74 views

CVE-2025-58188

CVE-2025-58188 (panic on validating certificate chains with DSA keys) is confirmed in an F5 advisory tied to BIG-IP Next for Kubernetes. Affected component set includes TMM, f5-dwbld, and f5-downloader; the root cause is a cast assuming an Equal method when validating certificate chains containin...

7.5CVSS6.6AI score0.00356EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/10/29 10:10 p.m.8 views

CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

7.5CVSS7.2AI score
SaveExploits0References8
Cvelist
Cvelist
added 2025/10/29 10:10 p.m.18 views

CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

0.00356EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/29 9:50 p.m.7 views

GO-2025-4013 Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...

7.5CVSS7AI score0.00356EPSS
SaveExploits0References3
Rows per page
Query Builder