EUVD-2025-37153

Malicious code in epic-dynamo-utils npm...

EUVD-2025-37179

Malicious code in epic-adminportal-frontend npm...

Malicious code in epic-node-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207720525d69e9c09afb392295f1566d480abc128a98065be73bb7044e93291 The package epic-node-blog was found to contain malicious code...

Malicious code in epic-diesel-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adcbf905c997345ce189329119f9b930faa8f8bbc07707262e5f1e83f280c61 The package epic-diesel-feed was found to contain malicious code...

EUVD-2025-37070

Malicious code in eslint-config-epic npm...

Malicious code in epic-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512b2df44075983b7f2a23a8151b414a43cb02a59ab726e6ba6db3c6c4874d01 The package epic-config was found to contain malicious code...

Malicious code in epic-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa7c7d03ea60912c6fed9d1f5f9c5c3900d85037444f871e74989e1e39a0682 The package epic-sso was found to contain malicious code...

Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

GO-2025-4055 Mattermost Server's Session ID and Session Token are potentially compromised in github.com/mattermost/mattermost-server

Mattermost Server's Session ID and Session Token are potentially compromised in github.com/mattermost/mattermost-server...

CVE-2024-45162

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

node-tar 安全漏洞

node-tar is a package for file compression/decompression by isaacs individual developers. A security vulnerability exists in node-tar version 7.5.1, which stems from the return of uninitialized memory contents when reading the contents of a tar entry using .t, which could lead to information...

EUVD-2025-36884

Malicious code in operations-packages npm...

EUVD-2025-36789

Malicious code in @gitlab-lsp/pkg-1 npm...

CVE-2023-0778 affecting package podman for versions less than 5.6.1-2

CVE-2023-0778 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3. A patched version of the package is available...

EUVD-2025-36401

Malicious code in tailwind-merge-setting npm...

SUSE CVE-2025-12198

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...

SUSE CVE-2025-12199

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...

SUSE CVE-2025-12200

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...

Fedora: Security Advisory (FEDORA-2025-daf52aa6ad)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...