GHSA-9XWC-HFWC-8W59 mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files

In mcp-server-git versions prior to 2025.12.18, the gitdiff and gitcheckout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values e.g., --output=/path/to/file for gitdiff would be interpreted as command-line options rather than git refs,...

mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files

In mcp-server-git versions prior to 2025.12.18, the gitdiff and gitcheckout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values e.g., --output=/path/to/file for gitdiff would be interpreted as command-line options rather than git refs,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991174 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2501)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...

The vulnerability of the ext4_xattr inode_update_ref() function in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the ext4xattr inodeupdateref function in the Linux operating system is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-56581)

btrfs: ref-verify: use-after-free after invalid ref action. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504648; scriptversion"1.3";...

EUVD-2025-135576

Malicious code in thambi-ref-vert npm...

EUVD-2025-135573

Malicious code in thambi-ref-vrete npm...

EUVD-2025-135574

Malicious code in thambi-ref-vrete npm...

EUVD-2025-135575

Malicious code in thambi-ref-vert npm...

EUVD-2025-135578

Malicious code in thambi-ref-trers npm...

MAL-2025-179077 Malicious code in thambi-ref-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135579

Malicious code in thambi-ref-rest npm...

Malicious code in thambi-ref-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135577

Malicious code in thambi-ref-trers npm...

Malicious code in thambi-ref-vrete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2792ff640b6461a841f60a6f8f345d75c2c076486df73ef2bcb941f2234c7f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-ref-trers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15b232fc23010556743ac7133744051f4911ee7f4c0a1e97f13eceb14ce3ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990406 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990610 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadvpurgeorigref Many syzbot reports are pointing to soft...

Moderate: galera and mariadb security update

Galera is a fast synchronous multimaster wsrep provider replication engine for transactional databases and similar applications. For more information about wsrep API see repository. For a description of Galera replication engine see web. Security Fixes: mysql: High Privilege Denial of Service...