MAL-2025-44463 Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm)

The package gravitationalwave-corvus-dotenv-parse-variables-xo was found to contain malicious code...

Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)

The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...

Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)

The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...

MAL-2025-44055 Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)

The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...

Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)

The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code...

MAL-2025-44052 Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)

The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...

Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)

The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...

Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)

The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...

Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)

The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...

Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)

The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...

Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)

The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...

MAL-2025-44929 Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)

The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...

MAL-2025-45181 Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)

The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...

MAL-2025-43921 Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)

The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...

MAL-2025-45506 Malicious code in parse-logger (npm)

The package parse-logger was found to contain malicious code...

Malicious code in parse-logger (npm)

The package parse-logger was found to contain malicious code...

The vulnerability of the usbhid_parse() function in the bNumDescriptors component of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the usbhidparse function in the bNumDescriptors component of the Linux kernel is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

CVE-2025-22423

In ParseTag of dngifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26443

CVE-2025-26443 affects Android’s HtmlToSpannedParser.parseHtml, where a logic error could permit installing apps without enabling installation from unknown sources. This is a local privilege escalation vulnerability (local vector, requires user interaction). The issue is tied to the parseHtml pat...