MAL-2025-12509 Malicious code in @zalastax/nolb-ngh (npm)

The package @zalastax/nolb-ngh was found to contain malicious code...

MAL-2025-26775 Malicious code in movesio (npm)

The package movesio was found to contain malicious code...

MAL-2025-25152 Malicious code in leomira (npm)

The package leomira was found to contain malicious code...

MAL-2025-11684 Malicious code in @zalastax/nolb-googlel (npm)

The package @zalastax/nolb-googlel was found to contain malicious code...

MAL-2025-11916 Malicious code in @zalastax/nolb-hap_ (npm)

The package @zalastax/nolb-hap was found to contain malicious code...

MAL-2025-19628 Malicious code in emmet-sketch (npm)

The package emmet-sketch was found to contain malicious code...

MAL-2025-31200 Malicious code in quasar-zebra-cbt662-project (npm)

The package quasar-zebra-cbt662-project was found to contain malicious code...

MAL-2025-16739 Malicious code in cfn2ts (npm)

The package cfn2ts was found to contain malicious code...

MAL-2025-13506 Malicious code in @zalastax/nolb-quas (npm)

The package @zalastax/nolb-quas was found to contain malicious code...

MAL-2025-26270 Malicious code in meynardp (npm)

The package meynardp was found to contain malicious code...

MAL-2025-22035 Malicious code in guess-zodiac (npm)

The package guess-zodiac was found to contain malicious code...

MAL-2025-11021 Malicious code in @zalastax/nolb-cra-tm (npm)

The package @zalastax/nolb-cra-tm was found to contain malicious code...

MAL-2025-11661 Malicious code in @zalastax/nolb-google-m (npm)

The package @zalastax/nolb-google-m was found to contain malicious code...

MAL-2025-11708 Malicious code in @zalastax/nolb-gool (npm)

The package @zalastax/nolb-gool was found to contain malicious code...

BELL-CVE-2025-22840

Bulletin has no description...

CLSA-2025-1754381382 git: Fix of CVE-2025-27613

CVE-2025-27613: fix vulnerability where Gitk can write and truncate arbitrary writable files...

AZL-66060 CVE-2025-54349 affecting package iperf3 for versions less than 3.17.1-3

In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...

CVE-2025-1708

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content...

AlmaLinux 9 : perl-FCGI (ALSA-2025:8635)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:8635 advisory. perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library CVE-2025-40907 Tenable has extracted the...

CVE-2024-47081 Requests vulnerable to .netrc credentials leak via malicious URLs

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be...