MAL-2025-3414 Malicious code in sas-pseudol10n4js (npm)

--- -= Per source details. Do not edit below this line.=-...

GO-2025-3637 Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS in github.com/minio/operator

Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS in github.com/minio/operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

CVE-2025-26413

creationtimestamp| type| source ---|---|--- 2025-04-22 07:21:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lnf5fbk2n52h 2025-04-22 08:02:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf7nhiw7x27 2025-04-22 08:03:52+00:00| seen|...

CGA-WJXM-MXVR-CVV2

Bulletin has no description...

CGA-FRWW-CQ8Q-FH6Q

Bulletin has no description...

BELL-CVE-2025-37860

Bulletin has no description...

CGA-8RVR-F8W4-MJH7

Bulletin has no description...

BELL-CVE-2025-30693

Bulletin has no description...

BELL-CVE-2025-23133

Bulletin has no description...

BELL-CVE-2025-22088

Bulletin has no description...

BELL-CVE-2025-22070

Bulletin has no description...

BELL-CVE-2025-23131

Bulletin has no description...

BELL-CVE-2025-22121

Bulletin has no description...

BELL-CVE-2025-22113

Bulletin has no description...

BELL-CVE-2025-22062

Bulletin has no description...

BELL-CVE-2025-22105

Bulletin has no description...

BELL-CVE-2025-22025

Bulletin has no description...

DSA-5905-1 graphicsmagick - security update

Bulletin has no description...

DSA-5903-1 chromium - security update

Bulletin has no description...

‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program

The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it...