EUVD-2025-176525

Malicious code in sanitize-sed-transpile-analyze-sandbox npm...

EUVD-2025-179941

Malicious code in bundle-theta-virtualize-sanitize-sigma npm...

Malicious code in sanitize-eta-promise-error-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179590

Malicious code in container-error-sanitize-authenticate-sigma npm...

EUVD-2025-179928

Malicious code in byte-assert-finally-hot-sanitize npm...

EUVD-2025-179059

Malicious code in error-alpha-sanitize-sanitize-daemon npm...

EUVD-2025-179214

Malicious code in easy-cron-secure-thread-sanitize npm...

EUVD-2025-176529

Malicious code in sanitize-eta-promise-error-awk npm...

EUVD-2025-177042

Malicious code in process-float-sanitize-module-import npm...

EUVD-2025-179698

Malicious code in cluster-sanitize-resolve-omega-encrypt npm...

EUVD-2025-179206

Malicious code in easy-throw-cron-rho-sanitize npm...

EUVD-2025-180008

Malicious code in book-sanitize-cat-cold-class npm...

EUVD-2025-176526

Malicious code in sanitize-new-link-code-void npm...

EUVD-2025-175632

Malicious code in water-user-fast-sanitize-test npm...

MAL-2025-187281 Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190244 Malicious code in water-user-fast-sanitize-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17601b4893c68eab5aeef268b3e08ec5b4809b4f32300ca5ce4cfbf32c530150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: io_uring: prevent opcode speculation

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

PT-2025-46176

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 multi Description A stored cross-site scripting XSS issue exists in Tenda AC18. The issue is located in the ssid parameter within the wireless settings. An attacker can inject malicious payloads that will execute...

CVE-2025-64494 Soft Serve does not sanitize ANSI escape sequences in user input

Soft Serve is a self-hostable Git server for the command line. In versions prior to 0.10.0, there are several places where the user can insert data e.g. names and ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages...

GHSA-VFPF-XMWH-8M65 Duplicate Advisory: ProsemirrorToHtml has a Cross-Site Scripting (XSS) vulnerability through unescaped HTML attribute values

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-52c5-vh7f-26fx. This link is maintained to preserve external references. Original Description Impact The prosemirrortohtml gem is vulnerable to Cross-Site Scripting XSS attacks through malicious HTML attribute...