PT-2026-64433

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description Cloudreve contains an issue where the built-in image decoders for PNG, JPEG, and GIF formats limit only the compressed file size but do not restrict the decoded pixel dimensions. An authenticated...

EUVD-2025-199045

Malicious code in react-native-get-pixel-dimensions npm...

Malicious code in react-native-get-pixel-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3570e34574e0faad44ff9473f62241285d926a86915d14b3593b9c3105520fc The package react-native-get-pixel-dimensions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190998 Malicious code in react-native-get-pixel-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3570e34574e0faad44ff9473f62241285d926a86915d14b3593b9c3105520fc The package react-native-get-pixel-dimensions was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...