OESA-2026-1214 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

OESA-2026-1216 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

Malicious code in sq-mdc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192918 Malicious code in sq-mdc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2015-6742

Malware in sbrugna...

EUVD-2024-52524

Malicious code in bioql PyPI...

EUVD-2025-4001

Malicious code in bioql PyPI...

EUVD-2024-45672

Malicious code in bioql PyPI...

EUVD-2025-3303

Malicious code in bioql PyPI...

EUVD-2025-16257

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-5165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function...

Linux Distros Unpatched Vulnerability : CVE-2025-5166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile...

Linux Distros Unpatched Vulnerability : CVE-2018-19205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue ...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +143 more potentially affected by CVE-2025-54075 via @nuxtjs/mdc (>=0.1.6, <=0.17.0)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.10.6 - @copity/copity 0.0.3 and more Source cves: CVE-2025-54075 Source advisory: OSV:GHSA-CJ6R-RRR9-FG82...

CVE-2025-54075 mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a element. The tag rewrites how all subsequent relative...

Nuxt MDC 跨站脚本漏洞

Nuxt MDC is a Nuxt open source application that enhances regular Markdown. A cross-site scripting vulnerability exists in Nuxt MDC versions prior to 0.17.2, which stems from improper handling of Markdown and could lead to a stored cross-site scripting attack...

PYSEC-2025-173

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

DEBIAN-CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

PYSEC-2025-173

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

UBUNTU-CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...