CVE-2025-55674 vulnerabilities

Vulnerabilities for packages: superset...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (=0.8.3-beta.1) +11 more potentially affected by CVE-2026-34504 via openclaw (>=2026.3.22 <=2026.3.24)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-34504 Source advisory: SNYK:JS-OPENCLAW-15857162...

CVE-2026-34387

Fleet is an open source device management platform. A command injection vulnerability exists in Fleet’s software installer pipeline prior to version 4.81.1, enabling arbitrary code execution as root on macOS/Linux or SYSTEM on Windows when uninstalling a crafted software package. Affected compone...

02strich-markdown (>=1.0.0 <=1.0.2), @0xintuition/slang-cli (>=0.0.1 <=0.0.8) +1941 more potentially affected by CVE-2026-27903 via minimatch (>=4.1.1 <=4.2.4)

minimatch NPM version =4.1.1, =1.0.0, =0.0.1, =0.5.2, =5.0.2, =2.2.0, =1.1.4, =1.3.1, =1.0.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =1.1.8, =1.0.0, =1.5.0 and more Source cves: CVE-2026-27903 Source advisory:...

CVE-2025-0716 vulnerabilities

Vulnerabilities for packages: solr...

MAL-2025-162872 Malicious code in nokire-loklok20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-rangginang10-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bf26e22bea6a357a387dbcc115f5fbc9a9baf83c539916d6daefb7be10268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e83f6d207bb8036316b92c7e420c844502fdb5ed3ca40ff9151f2cac9f502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1466 more potentially affected by CVE-2025-64459 via django (>=5.2.0 <=5.2.7)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

EUVD-2000-0350

Malware in sbrugna...

EUVD-2015-6325

Malware in sbrugna...

EUVD-2023-24196

Malicious code in bioql PyPI...

1shot (>=0.0.3 <=0.0.9), @4xian/ccapi (=1.0.6) +210 more potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.108 <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.108, =0.0.3, =0.1.18, =1.0.0, =0.4.0, =0.2.3, =0.0.1, =0.6.0-rc34, =1.0.0, =1.3.2-canary.5af7e49 - @chittycorp/chittychat =3.0.0 and more Source cves: CVE-2025-59828 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13109605...

Linux Distros Unpatched Vulnerability : CVE-2021-47528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnspendpointinit In cdnspendpointinit,...

ALSA-2025:12752 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 kernel: netsched:...

RHSA-2025:12293 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Bulletin has no description...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildah, falcoctl, zarf, apko, spire-server, cadvisor, aws-otel-collector, openfga, k9s, buildkitd, wolfictl, telegraf, syft, zot, buf, goreleaser, opentelemetry-collector, trufflehog, tw, kargo, trivy, splunk-otel-collector, nerdctl, docker-compos...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, kafka, liquibase, tritonserver-backend-vllm, spdx-tools-java, keycloak, leiningen, tritonserver-backend-vllm-cuda-12.9, opensearch, apache-activemq-artemis, infinispan, management-api-for-apache-cassandra-4.1, apache-hop, spark-fips, apache-tika,...

RHSA-2025:10295 Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update

Bulletin has no description...

Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...