MAL-2025-12419 Malicious code in @zalastax/nolb-mu3 (npm)

The package @zalastax/nolb-mu3 was found to contain malicious code...

MAL-2025-18784 Malicious code in dreampy (npm)

The package dreampy was found to contain malicious code...

MAL-2025-15420 Malicious code in banana-papaya-uhlq (npm)

The package banana-papaya-uhlq was found to contain malicious code...

MAL-2025-15993 Malicious code in borealis-stratosphere-prosthetics-ariel (npm)

The package borealis-stratosphere-prosthetics-ariel was found to contain malicious code...

MAL-2025-23045 Malicious code in ikst (npm)

The package ikst was found to contain malicious code...

MAL-2025-22590 Malicious code in honeydew-nzj-project (npm)

The package honeydew-nzj-project was found to contain malicious code...

MAL-2025-22302 Malicious code in hazel-redshift-60dx (npm)

The package hazel-redshift-60dx was found to contain malicious code...

MAL-2025-13028 Malicious code in @zalastax/nolb-pasa (npm)

The package @zalastax/nolb-pasa was found to contain malicious code...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

BELL-CVE-2025-53859

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2021-29972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediat...

CVE-2025-43186

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, macOS Ventura 13.7.7. Parsing a file may lead to an unexpected app termination...

BELL-CVE-2025-38423

Bulletin has no description...

BELL-CVE-2025-38413

Bulletin has no description...

BELL-CVE-2025-38402

Bulletin has no description...

BELL-CVE-2025-38374

Bulletin has no description...

BELL-CVE-2025-38355

Bulletin has no description...

UBUNTU-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

BELL-CVE-2025-38317

Bulletin has no description...

ALPINE-CVE-2025-49600

In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...