Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

MAL-2025-44375 Malicious code in ganymede-stream-nuxtjs-ursa (npm)

The package ganymede-stream-nuxtjs-ursa was found to contain malicious code...

MAL-2025-44290 Malicious code in fornax-stream-elara-miranda (npm)

The package fornax-stream-elara-miranda was found to contain malicious code...

MAL-2025-44050 Malicious code in dotenv-jasmine-cosmicweb-stream (npm)

The package dotenv-jasmine-cosmicweb-stream was found to contain malicious code...

MAL-2025-44771 Malicious code in jest-weywot-leda-stream (npm)

The package jest-weywot-leda-stream was found to contain malicious code...

Malicious code in xo-fornax-blitz-stream (npm)

The package xo-fornax-blitz-stream was found to contain malicious code...

Malicious code in loopback-ursa-stream-rollup (npm)

The package loopback-ursa-stream-rollup was found to contain malicious code...

MAL-2025-46738 Malicious code in xo-fornax-blitz-stream (npm)

The package xo-fornax-blitz-stream was found to contain malicious code...

MAL-2025-46256 Malicious code in terser-webpack-plugin-socketio-vuetify-stream (npm)

The package terser-webpack-plugin-socketio-vuetify-stream was found to contain malicious code...

Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

OESA-2025-2189 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2188 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2187 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2186 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2185 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

OESA-2025-2167 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

OESA-2025-2166 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

OESA-2025-2124 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due ...

PT-2025-36602

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

CVE-2025-32330

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not...