MAL-2025-41265 Malicious code in @google_cloud/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77d1d3e3759d05fa05f2d625c645f9ccca58c49fbedc0eb52e1ae34ca2a4d0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media (moderate)

ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15480-1 Rating: moderate Cross-References: CVE-2025-55193 CVSS scores: CVE-2025-55193 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-55193 SUSE : 5.3...

Malicious code in @navancorp/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1de6ab614103c47766130fafe2ddecb44f6c2cef32971d3da5418641756227 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41254 Malicious code in orion-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d017f02da39bfb33285066e5d65476f32d57195efe73652d4659863fe7b0367c The OpenSSF Package Analysis project identified 'orion-ui' @ 9.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6886 Malicious code in solana-spl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc65f4de1b50248d903c79cb67ac016c8da464314e5830c70dbe0a1140503a9 The OpenSSF Package Analysis project identified 'solana-spl-sdk' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6867 Malicious code in dependerable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f710204dca1899f1d3c1289dee4a05e791bfd14fdbe3678e52d4caa62869d816 The OpenSSF Package Analysis project identified 'dependerable' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Ubuntu: Security Advisory (USN-7688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15433-1 framework-inputmodule-control-0.2.0-3.1 on GA media

These are all security issues fixed in the framework-inputmodule-control-0.2.0-3.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 4269-1] ca-certificates-java bugfix update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4269-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 11, 2025 https://wiki.debian.org/LTS -...

MAL-2025-6814 Malicious code in horizon-ui-ng (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05025cfe461de95f60e8359c367b851181a07564256a7ce672e7c313007d0f87 The OpenSSF Package Analysis project identified 'horizon-ui-ng' @...

CVE-2025-38422 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38422 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

SUSE: Security Advisory (SUSE-SU-2025:02350-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15399-1 chromedriver-138.0.7204.183-1.1 on GA media

These are all security issues fixed in the chromedriver-138.0.7204.183-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : selenium-manager (2025-dda04d7a84)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-dda04d7a84 advisory. Update to version 4.34.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Malicious code in @h1shiny/ismobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41352c2bbbae70eddd76347925d3b58659e75bb8bb7773da87f544e9516ec3bd The OpenSSF Package Analysis project identified '@h1shiny/ismobile' @ 26.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-9902 affecting package ansible for versions less than 2.14.18-1

CVE-2024-9902 affecting package ansible for versions less than 2.14.18-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2025:15252-1 oci-cli-3.61.0-1.1 on GA media

These are all security issues fixed in the oci-cli-3.61.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15303-1 tomcat11-11.0.8-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : podman (2025-265201ce20)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-265201ce20 advisory. Automatic update for podman-5.5.2-1.fc43. security fix for CVE-2025-6032 Changelog for podman Tue Jun 24 2025 Packit - 5:5.5.2-1 - Update to 5.5.2 upstream...

Debian: Security Advisory (DLA-4216-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...