CVE-2025-26625

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

Lack of memory safety is such a predominant cause of security issues that we have a responsibility as professional software engineering to robustly mitigate it in security-sensitive use cases—by using memory safe languages. Similarly, I have the growing impression that software supply chain...

EUVD-2021-19580

Malware in sbrugna...

EUVD-2014-8020

Malware in sbrugna...

EUVD-2016-4167

Malware in sbrugna...

EUVD-2021-20312

Malware in sbrugna...

EUVD-2012-1655

Malware in sbrugna...

EUVD-2021-0763

Malware in sbrugna...

EUVD-2021-18778

Malware in sbrugna...

EUVD-2012-5433

Malware in sbrugna...

EUVD-2021-15148

Malware in sbrugna...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-392950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392950 advisory. In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: make sure to pull inner header in iptunnelrcv Apply the same fix than ones found i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-397670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-397670 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: make sure to pull inner header in geneverx syzbot triggered a bug in geneverx 1 Issue is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-391262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391262 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtpdevxmit syzbot/KMSAN reported use of uninit-value in getdevxmit 1...

EUVD-2025-20825

Malicious code in bioql PyPI...

EUVD-2022-6338

Malicious code in bioql PyPI...

EUVD-2023-27852

Malicious code in bioql PyPI...

EUVD-2024-38940

Malicious code in bioql PyPI...

EUVD-2025-15953

Malicious code in bioql PyPI...

EUVD-2024-41257

Malicious code in bioql PyPI...