CVE-2025-3017: Out-of-bounds Write

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/taregtest/tatestfunc/testminmax.c of the component taregtest. The manipulation leads to out-of-bounds write. It is possible to launch the...

PT-2025-13835

Name of the Vulnerable Software and Affected Versions TA-Lib versions up to 0.6.4 Description A critical issue has been found in TA-Lib, affecting the setInputBuffer function of the ta regtest component. This issue leads to an out-of-bounds write and can be exploited locally. The exploit has been...

SUSE CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

MAL-2025-2921 Malicious code in zkdrops-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zkdrops-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fullstory-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2879 Malicious code in fullstory-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2877 Malicious code in focc-commons-lib-backend-commons-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in events-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ab91cc267a455c80351de64025885c4a43811e4cb5bf953e36da0ef3057b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in events-utils-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2758 Malicious code in events-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ab91cc267a455c80351de64025885c4a43811e4cb5bf953e36da0ef3057b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

CVE-2025-27551: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

PT-2025-12875

Name of the Vulnerable Software and Affected Versions DBIx::Class::EncodedColumn versions prior to 0.00032 Description The issue arises from the use of the rand function, which is not cryptographically secure, to salt password hashes. This is associated with the program file...

Malware in layouts-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @mint-lib/query-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ac51b11c2e630ce893cff684562507667c0ab42c195ce066e9cd708d42c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6287de558e6cd52611d12e02b9997dbbb24d52578b129047832bea6483393830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +424 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.188.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28 and more Source cves: unknown CVE Source advisory:...

Improper Validation Of Array Index

github.com/onosproject/onos-lib-go is vulnerable to Improper Validation of Array Index. The vulnerability is due to an index out-of-range error in the GetBitString function. An attacker can cause a denial of service by sending crafted input that specifies a zero value for numBits...

Malicious code in migu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb336887faf02039935f114ebb2564586a99bfe58a39d4ab59b3899818e1dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...