1499 matches found
MAL-2025-15115 Malicious code in autofares (npm)
The package autofares was found to contain malicious code...
decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-8747 via keras (>=3.0.0 <=3.10.0)
keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-8747 Source advisory: SNYK:PYTHON-KERAS-11775502...
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
MAL-2025-6775 Malicious code in undeface-test-1 (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
MAL-2025-6670 Malicious code in z0rsdumbtestnonshould (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6653 Malicious code in schematics-cli (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6652 Malicious code in sajarilib (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6420 Malicious code in frontend-feature-flags (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6419 Malicious code in fooldependppu60h (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6415 Malicious code in essentialss (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6413 Malicious code in emailphotogallery (npm)
--- -= Per source details. Do not edit below this line.=-...