EUVD-2025-199351

Malicious code in vf-oss-template npm...

Malicious code in vf-oss-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d103d87bdd4b4e74f7f65f5726dc9eac4871a42a7298a619c317e9931c42aa84 The package vf-oss-template was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191447 Malicious code in vf-oss-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d103d87bdd4b4e74f7f65f5726dc9eac4871a42a7298a619c317e9931c42aa84 The package vf-oss-template was found to contain malicious code. Source: google-open-source-security...

OSV-2025-930 Dynamic-stack-buffer-overflow in _ox_err_set_with_location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462353164 Crash type: Dynamic-stack-buffer-overflow READ 1 Crash state: oxerrsetwithlocation readelement oxparse...

CLSA-2025-1763734783 kernel: Fix of 64 CVEs

media: bttv: fix use after free error due to btv-timeout timer CVE-2023-52847 - firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 - wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 - vsock: Fix transport TOCTOU CVE-2025-38461 - ALSA:...

OSV-2025-926 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462261562 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

CVE-2025-61662

creationtimestamp| type| source ---|---|--- 2025-11-18 17:55:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/195 2025-11-18 21:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5woirq7232a 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-54770

creationtimestamp| type| source ---|---|--- 2025-11-18 17:41:26+00:00| seen| https://seclists.org/oss-sec/2025/q4/194 2025-11-18 21:36:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wp3nxw772n 2026-03-19 00:00:00+00:00| seen|...

OSV-2025-900 Heap-buffer-overflow in DecodeFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=460575093 Crash type: Heap-buffer-overflow READ Crash state: DecodeFrame testdecoderprocess EsOutSend...

CVE-2016-7420

creationtimestamp| type| source ---|---|--- 2025-11-14 16:40:35+00:00| seen| https://seclists.org/oss-sec/2025/q4/180...

1-mutfru-muytio (=1.0.0), 12-mutfru-muytio (=1.0.0) +20270 more potentially affected by unknown CVE via acertea (=1.1.6)

acertea NPM version =1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio =1.0.0 - 12-mutfru-muytio =1.0.0 - @mipta1/aisax =1.0.0 - @mipta1/aisx =1.0.0 - @mipta1/aizsax =1.0.0 - @mipta1/aizzsax =1.0.0 -...

EUVD-2025-145211

Malicious code in my-oss-project-extensions npm...

EUVD-2025-145212

Malicious code in my-oss-project npm...

EUVD-2025-150116

Malicious code in tea-oss-mirt npm...

EUVD-2025-150115

Malicious code in tea-oss-tean npm...

CLSA-2025-1762454401 kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990631 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

CVE-2025-10966

creationtimestamp| type| source ---|---|--- 2025-11-05 06:16:22+00:00| seen| https://seclists.org/oss-sec/2025/q4/137 2025-11-05 22:12:33+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3m4w2zfmwdt2w 2025-11-07 05:53:31+00:00| seen|...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988892 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may...