CVE-2025-3017

TA-Lib up to version 0.6.4 is affected by an out-of-bounds write in the ta_regtest component (file src/tools/ta_regtest/ta_test_func/test_minmax.c, function setInputBuffer). The issue allows local exploitation and has public disclosure. A patch identifier is 5879180e9070ec35d52948f2f57519713256a0...

CVE-2025-3017 TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/taregtest/tatestfunc/testminmax.c of the component taregtest. The manipulation leads to out-of-bounds write. It is possible to launch the...

CVE-2025-3017 TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/taregtest/tatestfunc/testminmax.c of the component taregtest. The manipulation leads to out-of-bounds write. It is possible to launch the...

SUSE CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

MAL-2025-2921 Malicious code in zkdrops-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zkdrops-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2879 Malicious code in fullstory-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fullstory-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2877 Malicious code in focc-commons-lib-backend-commons-node (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2758 Malicious code in events-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ab91cc267a455c80351de64025885c4a43811e4cb5bf953e36da0ef3057b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in events-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ab91cc267a455c80351de64025885c4a43811e4cb5bf953e36da0ef3057b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/query-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ac51b11c2e630ce893cff684562507667c0ab42c195ce066e9cd708d42c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6287de558e6cd52611d12e02b9997dbbb24d52578b129047832bea6483393830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Validation Of Array Index

github.com/onosproject/onos-lib-go is vulnerable to Improper Validation of Array Index. The vulnerability is due to an index out-of-range error in the GetBitString function. An attacker can cause a denial of service by sending crafted input that specifies a zero value for numBits...

Malicious code in migu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb336887faf02039935f114ebb2564586a99bfe58a39d4ab59b3899818e1dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2576 Malicious code in momo-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81d74db94da3274b3d9b70e5de7f5b926c9c1af17a6d2a6b733d63a4cbacdf41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

alsa-lib bug fix and enhancement update

An update is available for alsa-lib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

onos-lib-go allows an index out-of-range panic

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

onos-lib-go 输入验证错误漏洞

onos-lib-go is an open source library of utilities and convenience programs for developing µONOS components in Go from the µONOS Project. A security vulnerability exists in onos-lib-go version 0.10.28, which stems from an asn1/aper GetBitString that can cause an index out-of-bounds panic when...

CVE-2025-30077

CVE-2025-30077 affects Open Networking Foundation’s ONOS ONOS-lib-go (v0.10.28). The vulnerability is an index out-of-range panic in asn1/aper GetBitString caused by a zero value for numBits, which can crash the process (availability impact). An external document notes a PoC exists. The connected...