CVE-2025-54074

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...

Security update for libavif

This update for libavif fixes the following issues: update to 1.3.0: CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in stream-offset+size...

SUSE-SU-2025:02817-1 Security update for libavif

This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...

SUSE-SU-2025:02816-1 Security update for libavif

This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...

Linux Distros Unpatched Vulnerability : CVE-2025-38236

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2022-50079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engi...

Malicious code in dexcom-stream (npm)

The package dexcom-stream was found to contain malicious code...

Malicious code in flatmap-stream (npm)

The package flatmap-stream was found to contain malicious code...

Malicious code in jasmine-stream-element-ui-config (npm)

The package jasmine-stream-element-ui-config was found to contain malicious code...

Malicious code in galaxy-stream-query-astrometry (npm)

The package galaxy-stream-query-astrometry was found to contain malicious code...

Malicious code in stream-uglify-js-aldebaran-framework (npm)

The package stream-uglify-js-aldebaran-framework was found to contain malicious code...

Malicious code in quantumfoam-stream-dagda-quasar (npm)

The package quantumfoam-stream-dagda-quasar was found to contain malicious code...

Malicious code in winston-jest-webdriver-mocha-stream (npm)

The package winston-jest-webdriver-mocha-stream was found to contain malicious code...

Malicious code in stream-polaris-andromeda-cz-conventional-changelog (npm)

The package stream-polaris-andromeda-cz-conventional-changelog was found to contain malicious code...

MAL-2025-32062 Malicious code in remark-betelgeuse-shelljs-stream (npm)

The package remark-betelgeuse-shelljs-stream was found to contain malicious code...

Malicious code in forever-bellatrix-chromedriver-stream (npm)

The package forever-bellatrix-chromedriver-stream was found to contain malicious code...

MAL-2025-17700 Malicious code in cross-env-blitz-bunyan-stream (npm)

The package cross-env-blitz-bunyan-stream was found to contain malicious code...

MAL-2025-27632 Malicious code in node-memory-stream (npm)

The package node-memory-stream was found to contain malicious code...

MAL-2025-34079 Malicious code in stream-format (npm)

The package stream-format was found to contain malicious code...

MAL-2025-20231 Malicious code in farout-stream-loglevel-sequelize (npm)

The package farout-stream-loglevel-sequelize was found to contain malicious code...