EUVD-2025-123512

Malicious code in postcss-loader-semantic-release-slides-buffer npm...

EUVD-2025-124843

Malicious code in mocha-fornax-umbriel-release-it npm...

MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147402 Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-31133 affecting package moby-runc for versions less than 1.2.8-1

CVE-2025-31133 affecting package moby-runc for versions less than 1.2.8-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update

An update is now available for Red Hat Ceph Storage 8.1. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...

thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...

thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance()

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in MediaTrackGraphImpl::GetInstance...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from failure to clear the conn-sk pointer, which could lead to reuse after release...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990806 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcpcdgrelease to be called multiple times Apparently, mptcp is able to call...

PT-2025-46724

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.13.99.1762267347 Tuleap Enterprise Edition versions prior to 17.01 Tuleap Enterprise Edition versions prior to 16.13-6 Tuleap Enterprise Edition versions prior to 16.12-9 Description Tuleap is an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly sequenced device release, which could result in a media controller error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the premature destruction of resources during validation, which could lead to reuse after release...

FiberHome AN5506-04-F和FiberHome HG6245D 安全漏洞

FiberHome AN5506-04-F and FiberHome HG6245D are both routers from FiberHome, a Chinese company. A security vulnerability exists in the FiberHome AN5506-04-F and FiberHome HG6245D that stems from a stack buffer overflow issue in the HTTP service, which could lead to a crash or perform flow control...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly using the RCU to protect dstdev access, which could lead to reuse after release...