Security Bulletin: Astronomer with IBM is vulnerable to event thread locking due to the starlette package (CVE-2025-54121)

Summary Starlette is used by Astronomer with IBM as part of the request processing functionality. Vulnerability Details CVEID:CVE-2025-54121 DESCRIPTION: Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In...

EUVD-2014-0056

Malware in sbrugna...

EUVD-2014-9554

Malware in sbrugna...

Linux Kasan Heap Buffer Overflow DoS

The vulnerability of the kasanfindvmarea function mm/kasan/report.c in the Linux kernel’s kasan component is related to mutual locking of execution threads. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

SUSE CVE-2025-38703

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

Atftpd Thread List Mutex NULL Pointer DoS

The vulnerability of the threadlistmutex function in the advanced TFTP server Atftpd is related to the lack of mutex locking before assigning a data structure. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

CVE-2012-5496

kupuspellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service ZServer thread lock via a crafted URL...

PYSEC-2014-38

kupuspellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service ZServer thread lock via a crafted URL...

Design/Logic Flaw

kupuspellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service ZServer thread lock via a crafted URL...

CVE-2012-5496

kupuspellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service ZServer thread lock via a crafted URL...

PT-2014-2323

Name of the Vulnerable Software and Affected Versions Kupu in Plone versions prior to 4.0 Description The issue allows remote attackers to cause a denial of service, specifically a ZServer thread lock, by using a crafted URL. Recommendations For versions prior to 4.0, update to version 4.0 or lat...

CVE-2012-5496: Undefined Security Weakness

kupuspellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service ZServer thread lock via a crafted URL...