Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse

Vault and Vault Enterprise’s “Vault” TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23...

RHSA-2025:12468 Red Hat Security Advisory: redis security update

Bulletin has no description...

RHSA-2025:12447 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

RHSA-2025:12450 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

MAL-2025-6654 Malicious code in seller-center (npm)

--- -= Per source details. Do not edit below this line.=-...

MINI-PVRR-3RWQ-7MR2

Bulletin has no description...

MINI-3H37-HJQP-MCH5

Bulletin has no description...

MAL-2025-6646 Malicious code in policy-agent-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6630 Malicious code in lint-staged-custom (npm)

--- -= Per source details. Do not edit below this line.=-...

CGA-WPG6-7XG9-F2WR

Bulletin has no description...

RHSA-2025:12333 Red Hat Security Advisory: icu security update

Bulletin has no description...

DLA-4261-1 node-form-data - security update

Bulletin has no description...

DSA-5970-1 sope - security update

Bulletin has no description...

RHSA-2025:12280 Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Bulletin has no description...

RHSA-2025:12240 Red Hat Security Advisory: libxml2 security update

Bulletin has no description...

RHSA-2025:12187 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:12100 Red Hat Security Advisory: libtpms security update

Bulletin has no description...

CVE-2025-4674 Unexpected command execution in untrusted VCS repositories in cmd/go

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...

RLSA-2025:3408 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

RLSA-2025:8419 Low: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...