CVE-2025-12893

Clients may successfully perform a TLS handshake with a MongoDB server despite presenting a client certificate not aligning with the documented Extended Key Usage EKU requirements. A certificate that specifies extendedKeyUsage but is missing extendedKeyUsage = clientAuth may still be successfully...

kernel: sctp: linearize cloned gso packets in sctp_rcv

A flaw use of uninitialized memory uncontrolled and invisible by attacker in the Linux kernel SCTP transport protocol was found in the way user triggers malicious SCTP packets. A remote user could use this flaw to crash the system. The bug actual only for systems where SCTP protocol being enabled...

MAL-2025-191389 Malicious code in axios-cancelable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7210c0ae0996b1026ba173fc3f0628154433a7a8ba971106d24dab744d6d28ec The package axios-cancelable was found to contain malicious code. Source: ghsa-malware 34b03d17fe2a4d83f67cbda737712693abb19fc4da135fab010adb7aeeb82d...

MAL-2025-191336 Malicious code in @voiceflow/body-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27087f99b3b863dae53a7bc93919c6691aa9fb2deb6de5eda5deea916f283686 The package @voiceflow/body-parser was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

Malicious code in @browserbasehq/bb9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1cd2b73fffb169a779067cb1753b525b3f8112141a253d64a4fb91cb0d4742 The package @browserbasehq/bb9 was found to contain malicious code. Source: ghsa-malware...

SUSE SLED15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4183-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4183-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling...

PT-2025-48052

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4181-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4181-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plug...

gimp security update

2:3.0.4-1.1 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934...

sssd security update

2.9.7-4.0.1.1 - Restore default debug level for ssscache Orabug: 32810448 Fri Oct 17 2025 Tomas Halman - Resolves: RHEL-120298 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems...

Linux Distros Unpatched Vulnerability : CVE-2022-50564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/netiucv: Fix return type of netiucvtx With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the...

Malicious code in @lui-ui/lui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...

Malicious code in quickswap-token-lists (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934c2b16a82e9886cc6939348bffcb3b75d536fceac933cf1f38bbf9ffdbd05 The package quickswap-token-lists was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191244 Malicious code in @lui-ui/lui-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8515f668c012cc4072d376364ab0ed194d6040b86dbc19737c43a7ab00acd2d4 The package @lui-ui/lui-tailwindcss was found to contain malicious code. Source: ghsa-malware...

Malicious code in vue-browserupdate-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191223 Malicious code in @fishingbooker/react-raty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a32900cd2e5c9e243d0183183c4b1e1fcb3b9e834f1bbc4ed5dd92087d73e1 The package @fishingbooker/react-raty was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191222 Malicious code in @fishingbooker/react-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1150699fbdbd82b14aab4463da75ae2d2bb7b4a64d01d48f98bef2f8243715 The package @fishingbooker/react-pagination was found to contain malicious code. Source: ghsa-malware...

Malicious code in @everreal/validate-esmoduleinterop-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab8b8345156c4c77c99622cb83f321f5904503094e6d54a19585d087a7849a6 The package @everreal/validate-esmoduleinterop-imports was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00107e442d452bcb43403d89ade38e4fb111f1d1624b2dc4d2498df1f9a6ca2 The package @oku-ui/slot was found to contain malicious code. Source: ghsa-malware 2a90589b3706323fe3b284df0f3935425b573427c0e51600a8c59a2fc69a670d A...