Malicious code in @zalastax/nolb-_dsr-rollback-org-m (npm)

The package @zalastax/nolb-dsr-rollback-org-m was found to contain malicious code...

CVE-2025-58620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through = 6.2.1...

Linux Distros Unpatched Vulnerability : CVE-2021-28117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs that are neither https:/...

Malicious code in custom-get-org-chart (npm)

The package custom-get-org-chart was found to contain malicious code...

MAL-2025-9950 Malicious code in @zalastax/nolb-_dsr-rollback-org-r (npm)

The package @zalastax/nolb-dsr-rollback-org-r was found to contain malicious code...

Malicious code in @zalastax/nolb-_dsr-rollback-org-r (npm)

The package @zalastax/nolb-dsr-rollback-org-r was found to contain malicious code...

Malicious code in @octo-org/octo-app (npm)

The package @octo-org/octo-app was found to contain malicious code...

MAL-2025-17833 Malicious code in custom-get-org-chart (npm)

The package custom-get-org-chart was found to contain malicious code...

MAL-2025-9141 Malicious code in @octo-org/octo-app (npm)

The package @octo-org/octo-app was found to contain malicious code...

MAL-2025-23230 Malicious code in injectapp-org-injection-of-apps-and-news900 (npm)

The package injectapp-org-injection-of-apps-and-news900 was found to contain malicious code...

MAL-2025-9947 Malicious code in @zalastax/nolb-_dsr-rollback-org-o (npm)

The package @zalastax/nolb-dsr-rollback-org-o was found to contain malicious code...

ROS-20250814-12

EMACS text editor vulnerability is related to incorrect input validation of the org-babel-execute:latex in ob-latex.el when processing file or directory names. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-50690

CVE-2025-50690 describes a reflected XSS in SpatialReference.org (OSGeo/spatialreference.org). The issue arises from improper handling of user input in the search query parameter, enabling an unauthenticated attacker to craft a URL that reflects and executes arbitrary JavaScript in a victim’s bro...

Linux Distros Unpatched Vulnerability : CVE-2023-28617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name...

CLSA-2025-1752088235 emacs: Fix of CVE-2024-39331

CVE-2024-39331: fix org-link-expand-abbrev to not expand unsafe link abbreviations...

CVE-2025-48886

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

CVE-2025-48886

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

CVE-2025-48886 hydra-node dangerously assumes L1 event finality and does not consider failed transactions

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

CVE-2025-48886 hydra-node dangerously assumes L1 event finality and does not consider failed transactions

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

CVE-2025-48886

Hydra, a Layer-2 scaling solution for Cardano, is affected by a vulnerability that arises from assuming L1 finality and neglecting failed transactions. Before version 0.22.0, Hydra treated certain L1 events as finalized as soon as recognized by node participants, making those transactions targets...