Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

Malicious code in safe-chain-test (npm)

The package safe-chain-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-30755 Malicious code in prosthetics-commitlint-config-angular-dotenv-safe-supervisor (npm)

The package prosthetics-commitlint-config-angular-dotenv-safe-supervisor was found to contain malicious code...

MAL-2025-32615 Malicious code in safe-chain-test (npm)

The package safe-chain-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-18673 Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm)

The package dotenv-safe-winston-dotenv-safe-markdown-pdf was found to contain malicious code...

MAL-2025-23286 Malicious code in interstellarmedium-configstore-dotenv-safe-oauth (npm)

The package interstellarmedium-configstore-dotenv-safe-oauth was found to contain malicious code...

MAL-2025-14534 Malicious code in angular2-safe-provider (npm)

The package angular2-safe-provider was found to contain malicious code...

Malicious code in n-safe-logger (npm)

The package n-safe-logger was found to contain malicious code...

MAL-2025-26423 Malicious code in mini-css-extract-plugin-jabbah-dotenv-safe-asthenosphere (npm)

The package mini-css-extract-plugin-jabbah-dotenv-safe-asthenosphere was found to contain malicious code...

MAL-2025-27522 Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)

The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...

CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

PT-2025-34571 · Crates.Io · Scratchpad

The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...

CVE-2025-2182

PAN-OS MACsec vulnerability (CVE-2025-2182) affects PA-7500 Series in NGFW clusters. The issue stems from the MACsec protocol implementation, allowing cleartext exposure of the connectivity association key (CAK). A CAK holder can read messages exchanged between devices within a clustered NGFW, wh...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Summary It is possible to bypass the mitigation introduced in response to CVE-2025-1550, when an untrusted Keras v3 model is loaded, even when “safemode” is enabled, by crafting malicious arguments to built-in Keras modules. The vulnerability is exploitable on the default configuration and does n...

GHSA-C9RC-MG46-23W3 Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Summary It is possible to bypass the mitigation introduced in response to CVE-2025-1550, when an untrusted Keras v3 model is loaded, even when “safemode” is enabled, by crafting malicious arguments to built-in Keras modules. The vulnerability is exploitable on the default configuration and does n...

Linux Distros Unpatched Vulnerability : CVE-2025-22126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from...

GHSA-PWQ7-2GVJ-VG9V Duplicate Advisory: Keras safe mode bypass vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c9rc-mg46-23w3. This link is maintained to preserve external references. Original Description A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an...

Duplicate Advisory: Keras safe mode bypass vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c9rc-mg46-23w3. This link is maintained to preserve external references. Original Description A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...