Malicious code in @character-tech/client-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4145 Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pythonbinance (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4217 Malicious code in el1t3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

[ASA-202505-12] go: directory traversal

Arch Linux Security Advisory ASA-202505-12 ========================================== Severity: Low Date : 2025-05-19 CVE-ID : CVE-2025-22873 Package : go Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2878 Summary ======= The package go before version 2:1.24.3-1...

Debian: Security Advisory (DLA-4169-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1493)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in coloramapkgsdow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

python311-mechanize-0.4.10-1.4 on GA media (moderate)

python311-mechanize-0.4.10-1.4 on GA media Announcement ID: openSUSE-SU-2025:15098-1 Rating: moderate Cross-References: CVE-2021-32837 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

GHSA-FF77-26X5-69CR vulnerabilities

Vulnerabilities for packages: camunda-zeebe, thingsboard...

MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alibaba Cloud Linux 3 : 0153: texlive (ALINUX3-SA-2023:0153)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0153 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-32700: LuaTeX before 1.17.0 allows executi...

Debian: Security Advisory (DLA-4162-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-46421 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-46421 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-22872 affecting package packer for versions less than 1.9.5-9

CVE-2025-22872 affecting package packer for versions less than 1.9.5-9. A patched version of the package is available...

MAL-2025-3612 Malicious code in aspose (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6b6ee0294def0dac75dde8c136ed50e9a8e33324beaea4ab4a595a2e8f5171 Any computer that has this package installed or running should be considered...

CVE-2025-21859 affecting package kernel for versions less than 5.15.179.1-1

CVE-2025-21859 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...

[SECURITY] [DLA 4151-1] golang-github-gorilla-csrf security update

-------------------------------------------------------------------------- Debian LTS Advisory DLA-4151-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura May 01, 2025 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-4145-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-19993

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.24.3 Go versions prior to 1.23.9 Description The issue concerns a security fix in the os package. Recommendations For versions prior to 1.24.3, update to version 1.24.3 to resolve the issue. For versions prior to 1.23.9,...