1555 matches found
Malicious code in simulateur-gas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296144588f638262f24eab478f9bd2e0c062de532a2fbafb8db60628bc2ac63b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2025:14817-1 kubernetes1.30-apiserver-1.30.10-1.1 on GA media
These are all security issues fixed in the kubernetes1.30-apiserver-1.30.10-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14815-1 google-osconfig-agent-20250115.01-2.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20250115.01-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14813-1 keylime-config-7.12.1-1.1 on GA media
These are all security issues fixed in the keylime-config-7.12.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-25285 vulnerabilities
Vulnerabilities for packages: renovate...
MAL-2025-1348 Malicious code in deepcoin-internal (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb83eff2eeb19ff872da9610ae40247140536ea979ba39b846c577ab024631 Any computer that has this package install...
MAL-2025-1328 Malicious code in bitmart-test (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca51f117bee2cff1b712ba689ce844c19ec597faf4268714f41fb013e464c6e Any computer that has this package install...
MAL-2025-1308 Malicious code in gate-production (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...
OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media
These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-0376 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
OPENSUSE-SU-2025:14797-1 kernel-firmware-serial-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-serial-20250206-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-37WC-H8XC-5HC4 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy...
DSA-5863-1 libtasn1-6 - security update
Bulletin has no description...
CVE-2024-21502
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
OPENSUSE-SU-2025:14731-1 MozillaThunderbird-128.7.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-1037 Malicious code in guests (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...
MAL-2025-1034 Malicious code in com.siccity.gltfutility (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201fb69ebbdbf7099f322edee00ed68a1cd7e707883db97efe712a72155f15e2 Any computer that has this package installed or running should be considered...
MAL-2025-1011 Malicious code in @infinid-indonesia/ui-kit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4eeca2bfa3c0d32dbee35f8956b2e79049540d209630206d040f2573ff118c6 Any computer that has this package installed or running should be considered...
MAL-2025-1013 Malicious code in apple-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...