MAL-2025-192556 Malicious code in cms_comp_static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e057568833f54e2250c5364e595d7a3046f4eb94f2484b9a0a2236b948cb10f The package cmscompstatic was found to contain malicious code. Source: ghsa-malware 38ce02191cf2d82246d56083ba8f7c2c4c0f14a71060bf8beaea95851f3c7a1e...

Malicious code in sdbao-content-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352174ed8ad21b72357fc69c51e395ee7b1ceb75b55603d205bdc8280dfc00b1 The package sdbao-content-report was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192564 Malicious code in sdbao-content-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352174ed8ad21b72357fc69c51e395ee7b1ceb75b55603d205bdc8280dfc00b1 The package sdbao-content-report was found to contain malicious code. Source: ghsa-malware...

Malicious code in sdbao-content-sems (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050ceeb8145a6cac66b0539a7be8d50c66979cd72b54055f3c49c0c40823fd6b The package sdbao-content-sems was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192557 Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

MAL-2025-192553 Malicious code in abrhide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915c7fe51aff6bedb2be97556debe08a952d2389c97d427479beda9d5d9d3ca6 The package abrhide was found to contain malicious code. Source: ghsa-malware 06ce2fae0c8baa7ffbe797fa1b7e090a96bcbc928e66921a8c8aa2dd788b276c Any...

Malicious code in abrhide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915c7fe51aff6bedb2be97556debe08a952d2389c97d427479beda9d5d9d3ca6 The package abrhide was found to contain malicious code. Source: ghsa-malware 06ce2fae0c8baa7ffbe797fa1b7e090a96bcbc928e66921a8c8aa2dd788b276c Any...

Malicious code in shopify-monorail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef2f1cf1e314cd9c5336d39ab49f2906fba52d48adadeed13adb5cf4104aa6d The package shopify-monorail was found to contain malicious code. Source: ghsa-malware fedb52b0658528a4cece77bf4ef96fff3b11449dbd45c44084d4308b1e4e3f...

Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in cfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5eaaf8ade83c339f3b0892ac216af2a8acd0ff78ba33498568eae45f6cf905 The package cfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192549 Malicious code in ffruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf46b55c70da3e5dad3896242df9922f032035d42c731e67dd91a38caf65daac The package ffruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in gfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813943ebd3c7e53be5309757e509dc22587aab81ded149ba9b56b37e87a4dd9 The package gfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in afruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36726b904c7ec2d58c9ade48fc63b898841138faa395862ae2a28be8e6701e0a The package afruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192545 Malicious code in bfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff72c0a1c73026b834ec6a3b7d7cb8a31e1e07346126733651319019917d1f91 The package bfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

Malicious code in fruit-malicious-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c330d59c7529d320701e6ccf11a655110e1aeb7c9ad5d15c34ba10941c6343a6 The package fruit-malicious-xml-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in bfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff72c0a1c73026b834ec6a3b7d7cb8a31e1e07346126733651319019917d1f91 The package bfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

SUSE-SU-2025:4371-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS bsc1253332 - CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq bsc1253333 Other fixes: - Use...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991160 advisory. In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix the warning when removing the module When removing the module, we will get th...

EUVD-2023-60185

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

CVE-2023-53741

Screen SFT DAB 1.9.3 is affected by a weak session management vulnerability that allows an attacker to bypass authentication by reusing IP-address-bound session identifiers. The issue enables exploitation of the vulnerable API by intercepting and reusing established sessions to remove user accoun...