1579 matches found
AWS SDK for Swift adopted defense in depth enhancement for region parameter value
CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...
[SECURITY] Fedora 41 Update: restic-0.18.1-1.fc41
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
[SECURITY] Fedora 42 Update: restic-0.18.1-1.fc42
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
[SECURITY] Fedora 43 Update: restic-0.18.1-1.fc43
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
Access Control Bypass
Overview swift is an OpenStack Object Storage Affected versions of this package are vulnerable to Access Control Bypass via the ec2tokens or s3tokens process when a request with a valid AWS Signature is accepted for authorization. An attacker can gain unauthorized access by submitting specially...
swift-scality-backend (0.4.4) potentially affected by CVE-2025-65073 via swift (2.38.1)
swift PYPI version 2.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on swift and may be impacted: - swift-scality-backend 0.4.4 Source cves: CVE-2025-65073 Source advisory: SNYK:PYTHON-SWIFT-14038401...
[SECURITY] [DSA 6056-1] keystone security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6056-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 13, 2025 https://www.debian.org/security/faq -...
Debian dsa-6056 : keystone - security update
The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6056 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6056-1 [email protected] https://www.debian.org/security/...
MAL-2025-148411 Malicious code in swift_dragon_green-32 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120009
Malicious code in swiftdragongreen-32 npm...
EUVD-2025-117178
Malicious code in pale-ivory-swift npm...
EUVD-2025-117042
Malicious code in systematic-chocolate-swift npm...
MAL-2025-138924 Malicious code in pale-ivory-swift (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0842ec1c31403be2c9b18ed3cf0c753346837220b3bb8da64b35ee217333cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pale-ivory-swift (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0842ec1c31403be2c9b18ed3cf0c753346837220b3bb8da64b35ee217333cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in indirect_swift_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8c26001a900b5285fab3d383517e89ca392dae2de339d923fcafe94eee27fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101965
Malicious code in swiftaspz3n npm...
EUVD-2025-101966
Malicious code in swiftalligatorz3n npm...