1104 matches found
Deserialization of Untrusted Data
Overview fickling is an A static analyzer and interpreter for Python pickle data Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to incomplete detection of dangerous pickle constructs. The safety analysis fails to block certain unsafe module imports,...
PT-2025-51355
Name of the Vulnerable Software and Affected Versions Fickling versions prior to 0.1.6 Description Fickling, a Python pickling decompiler and static analyzer, contained a bypass related to missing unsafe module imports. Specifically, the pty module was not included in the block list, leading to...
DEBIAN-CVE-2023-53799
In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...
CVE-2023-53799
CVE-2023-53799 affects the Linux kernel crypto subsystem where crypto_destroy_instance could free an instance in atomic context if the last user unregisters while active. Root cause: crypto_drop_spawn may be invoked outside process context, risking atomic-context frees. Fix: defer the freeing to ...
EUVD-2025-176274
Malicious code in spawn-venus-hydra-cordelia npm...
EUVD-2025-177586
Malicious code in nightwatch-spawn-leda-tool npm...
Malicious code in spawn-webpack-nightwatch-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318806806d481ef740dd17c622bc164b94a295e29a9282fc7c00d3951dfeaee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176280
Malicious code in spawn-exec-zenobia-ganymede npm...
EUVD-2025-179407
Malicious code in dagda-spawn-selenium-vega npm...
Malicious code in spawn-exec-zenobia-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d195fec77b588ee50726619249d1d77aacd06b4a03966370f3dee0c6edc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cryonics-meteor-spawn-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c27aa5329f56cf3e14b276cb98484dc547ec4b931ebec69624e17a939e8e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179741
Malicious code in child-process-blitz-spawn-wasat npm...
EUVD-2025-176278
Malicious code in spawn-nova-antares-sync npm...
Malicious code in convict-spawn-gravitationalwave-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-spawn-leda-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176273
Malicious code in spawn-webpack-nightwatch-slides npm...
Malicious code in dagda-spawn-selenium-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577b28c0b18bb61c9dd2efacf6fc2620489f0e87c664c1ceb83b6663cf92d7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178754
Malicious code in geckodriver-nebula-spawn-apollo npm...