MAL-2025-10593 Malicious code in @zalastax/nolb-_wim (npm)

The package @zalastax/nolb-wim was found to contain malicious code...

MAL-2025-12923 Malicious code in @zalastax/nolb-packagex (npm)

The package @zalastax/nolb-packagex was found to contain malicious code...

MAL-2025-22824 Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

MAL-2025-22849 Malicious code in hydrogeology-transform-crust-library (npm)

The package hydrogeology-transform-crust-library was found to contain malicious code...

MAL-2025-10858 Malicious code in @zalastax/nolb-capb (npm)

The package @zalastax/nolb-capb was found to contain malicious code...

MAL-2025-29617 Malicious code in presently (npm)

The package presently was found to contain malicious code...

MAL-2025-15891 Malicious code in bluepages (npm)

The package bluepages was found to contain malicious code...

MAL-2025-18569 Malicious code in dock-yew-2lx8 (npm)

The package dock-yew-2lx8 was found to contain malicious code...

MAL-2025-11660 Malicious code in @zalastax/nolb-google-l (npm)

The package @zalastax/nolb-google-l was found to contain malicious code...

MAL-2025-15563 Malicious code in beepak (npm)

The package beepak was found to contain malicious code...

MAL-2025-24655 Malicious code in kiwi-strawberry-yam-qnhow (npm)

The package kiwi-strawberry-yam-qnhow was found to contain malicious code...

MAL-2025-10137 Malicious code in @zalastax/nolb-_ioi (npm)

The package @zalastax/nolb-ioi was found to contain malicious code...

MAL-2025-17331 Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)

The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...

AZL-35393 CVE-2023-49554 affecting package yasm 1.3.0-17

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

SUSE-SU-2022:2763-1 Security update for sssd

This update for sssd fixes the following issues: - CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommand bsc1189492. - Add 'ldapignoreunreadablereferences' parameter to skip unreadable objects referenced by 'member' attributte bsc1190775 - Fix 32-bi...

CLSA-2022-1656958778 Fixed CVEs in php-1.module_el8.5.0+2068+cc873159.tuxcare.els4: CVE-2022-31626, CVE-2022-31625

CVE-2022-31626: php: password of excessive length triggers buffer overflow leading to RCE - CVE-2022-31625: don't free uninitialized parameters that have led to RCE...

libsolv Heap Overflow Vulnerability (CNVD-2022-15955)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

Stmicroelectronics Stm32 Crypto Library Package Encryption Problem Vulnerability

The Stmicroelectronics Stm32 Crypto Library Package is a code library from Stmicroelectronics, Inc. that provides cryptographic functionality for the Stm32 family of microcontrollers. The Stmicroelectronics Stm32 Crypto Library Package is vulnerable to a cryptographic issue that could allow an...

[SECURITY] Fedora 28 Update: libtiff-4.0.9-13.fc28

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] Fedora 28 Update: python-XStatic-jquery-ui-1.12.0.1-2.fc28

JavaScript library packaged for setuptools easyinstall / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements...