CVE-2021-23639

Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...

PT-2026-145238

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.69 Description A NULL pointer dereference occurs in the mod md module during the processing of HTTP requests. A NULL pointer dereference is a condition where the software attempts to read or write...

Malicious code in rimuru-md (npm)

rimuru-md is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in src/connection.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @makamesco-md/baileys (npm)

@makamesco-md/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @baileys-md/baileys (npm)

@baileys-md/baileys is a fork of the Baileys WhatsApp Web library. In version 12.2.0, makeNewsletterSocket in lib/Socket/newsletter.js starts a timer that, 80 seconds after the socket is created, sends the WhatsApp w:mex FOLLOW query for the channels 120363419781122699@newsletter and...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset readslot when reusing r10bio for discard putallbios always drops devsi.bio; however, it only drops devsi.replbio when r10bio-readslot 0. If discard reuses an r10bio that was previously used for a read, readslot m...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1bio when REQNOWAIT is set and read would block on retry When a read is retried, raid1readrequest may be called with a pre-allocated r1bio. If waitreadbarrier fails for a REQNOWAIT read, the bio is completed and t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - In md/raid10, issues with writepending references and barrier reference leaks during discard failures were addressed. - In raid10makerequest, a reference to writepending is acquired before mdwritestart is called, and then...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - md/raid10: Fixed the issue of a “writesPending” reference being retained after write request failures. - In raid10makerequest, the “writesPending” reference is acquired with mdwritestart before dispatching write requests...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previous logic does not reliably reflect...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with mdclonedbio Detect the error path by using mdclonedbio instead of relying on r1bio in raid1 or r10bio-readslot in raid10; these functions may return NULL or -1 after splitting and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1, raid10: fixed deadlock in the read error recovery path. raid1d and raid10d may resubmit a split MD cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after calling ppliounitfinished, touching io-pendingflushes and leading to a use-after-free. Add a break statement to stop the loop once io...

Malicious code in @ifasn/md-doc-mcp (npm)

Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on startup of its md-doc-mcp bin it probes cloud-provider...

MAL-2026-18486 Malicious code in @ifasn/md-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on...

Malicious code in @ifasn/md-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on...

Malicious code in md-to-slides (PyPI)

Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...

CLEANSTART-2025-YN90003 flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends

Security vulnerability affects the libssh package. A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends...

MAL-2026-18428 Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...