OESA-2025-2675 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

SUSE CVE-2025-40134

In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in dmsuspend There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load completes: BUG...

CVE-2025-63744

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load function of bindyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program...

CVE-2025-63744

CVE-2025-63744 affects radare2 6.0.5 and earlier due to a NULL pointer dereference in the load() function in bin_dyldcache.c, which can cause a segmentation fault/crash when processing a crafted file. Several connected advisories confirm the vulnerable function/file and advise upgrading to a vers...

CVE-2025-63744

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load function of bindyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program...

CVE-2025-40134

In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in dmsuspend There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load completes: BUG...

CVE-2025-12869

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...

Malicious code in abstract-hash-key-report-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178429

Malicious code in index-load-rain-gamma-log npm...

EUVD-2025-176374

Malicious code in simple-load-info-error-cold npm...

EUVD-2025-176394

Malicious code in short-load-user-slow-easy npm...

EUVD-2025-178050

Malicious code in load-wind-root-balance-file npm...

EUVD-2025-179760

Malicious code in char-double-load-notify-gamma npm...

EUVD-2025-179386

Malicious code in debug-container-zeta-load-log npm...

EUVD-2025-179318

Malicious code in deserialize-load-byte-delta-optimize npm...

EUVD-2025-177882

Malicious code in meta-load-thread-grep-decompress npm...

EUVD-2025-179026

Malicious code in eta-refactor-execute-float-load npm...

EUVD-2025-178693

Malicious code in good-bundle-scale-grid-load npm...

EUVD-2025-175623

Malicious code in web-compile-deploy-load-secure npm...

MAL-2025-190253 Malicious code in web-compile-deploy-load-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b89eb11df0d45c9af94679854dc0e9edd6be08c36b6b9efed4a24abaf2a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...