MAL-2025-190639 Malicious code in @asyncapi/openapi-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4e9b39029c1f0084db9cd77fb419e5b003036f5b3db50d6b52097114f0c729 The package @asyncapi/openapi-schema-parser was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198642

Malicious code in @asyncapi/parser npm...

Malicious code in @asyncapi/parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60490138601b88d5bc5b3f5cfb5d6bf7f1c04848429e5aa48c1812ff4c8208e5 The package @asyncapi/parser was found to contain malicious code. Source: ghsa-malware 58daec6c982800e33901b1072260f4b144aa0b64db38ee45dd9219fe13a654...

MAL-2025-190640 Malicious code in @asyncapi/parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60490138601b88d5bc5b3f5cfb5d6bf7f1c04848429e5aa48c1812ff4c8208e5 The package @asyncapi/parser was found to contain malicious code. Source: ghsa-malware 58daec6c982800e33901b1072260f4b144aa0b64db38ee45dd9219fe13a654...

Denial Of Service

rack is vulnerable to Denial Of Service. The vulnerability is due to unbounded buffering of the multipart preamble in Rack::Multipart::Parser, where attackers can send extremely large preamble data before the first boundary, causing excessive memory consumption and potential OOM-induced DoS...

Denial Of Service (DoS)

rack is vulnerable to Denial Of Service. The vulnerability is due to unbounded in-memory storage of non-file multipart form fields in Rack::Multipart::Parser, where attackers can send extremely large text fields that consume process memory and trigger OOM conditions, leading to DoS...

PT-2025-47951

Name of the Vulnerable Software and Affected Versions body-parser versions prior to 2.2.1 Description The software is susceptible to a denial of service condition resulting from inefficient processing of URL-encoded request bodies containing a large number of parameters. An attacker can exploit...

Google Chrome < 4.3.61.21 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 4.3.61.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 201505stable-channel-update19 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers ...

Linux Distros Unpatched Vulnerability : CVE-2025-13466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can se...

body-parser 安全漏洞

body-parser is a Node.js parsing middleware open-sourced by expressjs. A security vulnerability exists in body-parser version 2.2.0, which stems from inefficient handling of URL-encoded bodies and could lead to a denial-of-service attack...

CVE-2025-65092

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted malicious JPEG image could exploit the parsing routine and trigg...

RLSA-2025:20962 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Rack QueryParser has an unsafe default allowing paramslimit bypass via semicolon-separated parameters CVE-2025-59830 rack: Rack's unbounded multipart preamble...

OSV-2025-926 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462261562 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

Wireshark 缓冲区错误漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer error vulnerability exists in Wireshark version 4.6.0 and versions 4.4.0 through 4.4.10...

Improper Validation of Array Index

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Array Index via the MultiModalDataParser input processor. An attacker can cause the engine to crash by submitting multimodal...

TencentOS Server 4: python-cmarkgfm (TSSA-2025:0086)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0086 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: exiv2 (TSSA-2024:0274)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0274 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: rubygem-rack (TSSA-2025:0410)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0410 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: LibRaw (TSSA-2025:0399)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0399 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: http-parser (TSSA-2022:0055)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0055 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...