PT-2025-34581 · Git · Libwebp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438264629 Crash type: Null-dereference READ Crash state: advanced api [email protected]...

OpenBao has an unspecified vulnerability (CNVD-2025-18599)

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

Kap 代码注入漏洞

Kap is an open source screen recorder from Wulkano Open Source. A code injection vulnerability exists in Kap version 3.6.0, which stems from improper code generation control and could lead to a TCC bypass...

OpenBao Code Injection Vulnerability

OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...

MAL-2025-15981 Malicious code in bootmap (npm)

The package bootmap was found to contain malicious code...

MAL-2025-16633 Malicious code in castdemo (npm)

The package castdemo was found to contain malicious code...

MAL-2025-25556 Malicious code in logsoul (npm)

The package logsoul was found to contain malicious code...

MAL-2025-17819 Malicious code in cucmber (npm)

The package cucmber was found to contain malicious code...

Malicious code in @zalastax/nolb-o6 (npm)

The package @zalastax/nolb-o6 was found to contain malicious code...

MAL-2025-20944 Malicious code in freeaml (npm)

The package freeaml was found to contain malicious code...

MAL-2025-19281 Malicious code in ejstags (npm)

The package ejstags was found to contain malicious code...

Malicious code in hkaga-ama (npm)

The package hkaga-ama was found to contain malicious code...

CVE-2025-54409

creationtimestamp| type| source ---|---|--- 2025-08-14 17:01:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/110 2025-08-14 19:51:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf4gge6go2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-54389

creationtimestamp| type| source ---|---|--- 2025-08-14 16:58:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/109 2025-08-14 19:26:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf2zpgb5d2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-55167

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependenteremover.php endpoint, specifically in the iddependente parameter. This vulnerability...

Maintainers of Last Resort

Geomys is an organization of professional open source maintainers, focused on a portfolio of critical Go projects. For example, we are two thirds of the Go standard library cryptography maintainers, we provide the FIPS 140-3 validation of the upstream Go Cryptographic Module, and we fund the...

CVE-2025-55675

creationtimestamp| type| source ---|---|--- 2025-08-14 11:23:00+00:00| seen| https://seclists.org/oss-sec/2025/q3/108 2025-08-14 13:55:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweikou36f2r...

CVE-2025-55674

creationtimestamp| type| source ---|---|--- 2025-08-14 11:09:23+00:00| seen| https://seclists.org/oss-sec/2025/q3/107 2025-08-14 13:30:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweh5v4hus2o 2025-08-14 15:02:16+00:00| seen|...

CVE-2025-55673

creationtimestamp| type| source ---|---|--- 2025-08-14 10:41:44+00:00| seen| https://seclists.org/oss-sec/2025/q3/105 2025-08-14 13:10:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwefzyvra22p...

MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...