5626 matches found
MAL-2025-192903 Malicious code in chalk-thrift (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-service (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192902 Malicious code in chalk-service (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192899 Malicious code in chalk-hostname (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192901 Malicious code in chalk-sentry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192900 Malicious code in chalk-interface (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-hostname (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192898 Malicious code in chalk-henson (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192897 Malicious code in chalk-consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-aws (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192895 Malicious code in chalk-aws (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
pcs security update
0.11.10-1.el97.1 - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938 0.11.10-1 - Rebased pcs to the latest sources see CHANGELOG.md Resolves: RHEL-77194,...
rack: Rack memory exhaustion denial of service
A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...
rack: Rack memory exhaustion denial of service
A denial of service flaw has been found in the rubygems rack package. Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing...
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels
Cybersecurity researchers have identified several malicious packages across npm, Python, and Ruby ecosystems that leverage Discord as a command-and-control C2 channel to transmit stolen data to actor-controlled webhooks. Webhooks on Discord are a way to post messages to channels in the platform...
EUVD-2019-0514
Malware in sbrugna...
EUVD-2019-0502
Malware in sbrugna...