5963 matches found
OESA-2025-2689 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...
OESA-2025-2691 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: The Keras.Model.loadmodel method, including when executed with the intended security mitigation safemode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery SSRF. This vulnerability stems from th...
EUVD-2025-177979
Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...
EUVD-2025-176836
Malicious code in query-betelgeuse-nebula-dotenv-safe npm...
EUVD-2025-179259
Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...
EUVD-2025-175528
Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...
EUVD-2025-179312
Malicious code in despina-publish-spectron-webdriver-dotenv-safe npm...
EUVD-2025-179255
Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...
EUVD-2025-179650
Malicious code in command-dotenv-safe-oberon-lint-staged npm...
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-179575
Malicious code in cordelia-indus-cors-dotenv-safe npm...
EUVD-2025-178364
Malicious code in interstellarmedium-remark-procyon-dotenv-safe npm...
EUVD-2025-175509
Malicious code in xenobiology-technocracy-dotenv-safe-brane npm...
EUVD-2025-178105
Malicious code in library-dotenv-safe-gridsome-singularity npm...
EUVD-2025-179261
Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...
EUVD-2025-175840
Malicious code in umbra-australis-dotenv-safe-google npm...
EUVD-2025-177565
Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...
EUVD-2025-176786
Malicious code in rate-limiter-writable-dotenv-safe-geckodriver npm...
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...