MAL-2025-21888 Malicious code in graphql-shorthand-parser2 (npm)

The package graphql-shorthand-parser2 was found to contain malicious code...

MAL-2025-32322 Malicious code in rns-parser (npm)

The package rns-parser was found to contain malicious code...

Malicious code in pml-edi-parser (npm)

The package pml-edi-parser was found to contain malicious code...

Malicious code in wms-capabilities-parser (npm)

The package wms-capabilities-parser was found to contain malicious code...

MAL-2025-13000 Malicious code in @zalastax/nolb-parser (npm)

The package @zalastax/nolb-parser was found to contain malicious code...

MAL-2025-15924 Malicious code in boby_parser (npm)

The package bobyparser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-29446 Malicious code in pml-edi-parser (npm)

The package pml-edi-parser was found to contain malicious code...

MAL-2025-33232 Malicious code in sightly-parser (npm)

The package sightly-parser was found to contain malicious code...

MAL-2025-27826 Malicious code in npm-babel-parser (npm)

The package npm-babel-parser was found to contain malicious code...

MAL-2025-29556 Malicious code in powerquery-parser (npm)

The package powerquery-parser was found to contain malicious code...

MAL-2025-23954 Malicious code in json-packet-parser (npm)

The package json-packet-parser was found to contain malicious code...

MAL-2025-22002 Malicious code in grunt-vox-asset-bundle-parser (npm)

The package grunt-vox-asset-bundle-parser was found to contain malicious code...

MAL-2025-30991 Malicious code in qbirc-parser (npm)

The package qbirc-parser was found to contain malicious code...

Security update for python3

This update for python3 fixes the following issues: CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705 CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249 Other fixes: - Limit...

Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244404. CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser bsc1244403. CVE-2025-47806: Fixed stack buffer overflow in SubRip...

CVE-2025-54472

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

CVE-2025-54472

CVE-2025-54472 affects Apache bRPC’s Redis protocol parser. The root cause is unbounded memory allocation when parsing Redis protocol data, where arrays/strings are allocated based on network-provided integers; if a value is too large, a bad_alloc can crash the service. The issue also affects 1.1...

CVE-2025-54472 Apache bRPC: Redis Parser Remote Denial of Service

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

CVE-2025-54472 Apache bRPC: Redis Parser Remote Denial of Service

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

SUSE CVE-2025-54801

Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in...