4576 matches found
Malicious code in expo-router-on-rails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92bd7bcf264644e954c78205f555c4b45d42e4e628db37666799375a9a8777f5 The package expo-router-on-rails was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191088 Malicious code in expo-router-on-rails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92bd7bcf264644e954c78205f555c4b45d42e4e628db37666799375a9a8777f5 The package expo-router-on-rails was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199157
Malicious code in expo-router-on-rails npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
TencentOS Server 4: pcs (TSSA-2025:0511)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0511 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Discourse < 3.3.3 Backup Disclosure
Discourse versions prior to 3.3.3 are vulnerable to a backup disclosure vulnerability due to improper handling of file downloads in the rails sendfile method. An attacker could exploit this vulnerability to download backup files containing sensitive information, potentially leading to data...
CVE-2025-61780 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, kube-fluentd-operator...
GHSA-6XW4-3V39-52MM vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, kube-fluentd-operator...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, kube-fluentd-operator...
CVE-2025-61919 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, kube-fluentd-operator...
CVE-2025-61780 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.4-rack, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.3-rack, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rack, ruby3.2-rails...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.4-rack, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.3-rack, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rack, ruby3.2-rails...
CVE-2025-61919 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.4-rack, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.3-rack, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rack, ruby3.2-rails...
GHSA-6XW4-3V39-52MM vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.4-rack, logstash, ruby3.3-rails, gitlab-rails-ce, ruby3.3-rack, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rack, ruby3.2-rails...
DEBIAN-CVE-2025-61780
Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...
CVE-2025-61770 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, gitlab-cng...
CVE-2025-61771 vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, gitlab-cng...
GHSA-WPV5-97WM-HP9C vulnerabilities
Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, gitlab-cng...