EUVD-2025-66747

Malicious code in singlesailfishz3n npm...

EUVD-2025-66748

Malicious code in singlebisonz3n npm...

EUVD-2025-52008

Malicious code in single-peach-mole npm...

Malicious code in single-jade-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaf7654bd14c8025c844b5926d80fb1f32428da53d6aa3fdc0858956ce92fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52007

Malicious code in single-tomato-lizard npm...

EUVD-2025-52012

Malicious code in single-blue-pinniped npm...

EUVD-2025-52009

Malicious code in single-olive-limpet npm...

EUVD-2025-52010

Malicious code in single-jade-owl npm...

MAL-2025-70639 Malicious code in single-jade-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaf7654bd14c8025c844b5926d80fb1f32428da53d6aa3fdc0858956ce92fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52011

Malicious code in single-coffee-leopard npm...

Malicious code in single-peach-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d104c60259de9fdb858f3f9e1fcf95afb0f78de21d356b9e36052fe5bb3524f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-41116

Grafana is an open-source platform for monitoring and observability. The Grafana-Databricks-Datasource is a plugin allowing Grafana to visualize data from Databricks Enterprise Versions between 1.6.0 and 1.12.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are usin...

EUVD-2025-49378

Malicious code in singlesilverfishz3n npm...

EUVD-2025-45313

Malicious code in singlevicunaz3n npm...

CVE-2025-63497

The patient prescription viewing functionality in hisdocviewsinglepatient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The patnumber GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attacke...

CVE-2025-64343

conda Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are very permissive and often allow write...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.17 Update

New Red Hat build of Keycloak 26.0.17 packages are available from the Customer Portal Red Hat build of Keycloak 26.0.17 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

CVE-2025-64343 (conda) Constructor: Excessive permissions during and after installation

conda Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are very permissive and often allow write...

CVE-2025-64343 (conda) Constructor: Excessive permissions during and after installation

conda Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are very permissive and often allow write...

EUVD-2025-38241

conda Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are very permissive and often allow write...