Unity Linux 20.1070e Security Update: ongres-scram (UTSA-2025-988625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988625 advisory. SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms...

OESA-2025-2391 ongres-scram security update

Scram is part of the family of Simple Authentication and Security Layer authentication mechanisms.It is described as part of RFC 5802 and RFC7677. This pachage is a Java implementation. Security Fixes: SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple...

EUVD-2018-18287

Malware in sbrugna...

EUVD-2021-0784

Malware in sbrugna...

EUVD-2016-9065

Malware in sbrugna...

EUVD-2024-0067

Malicious code in bioql PyPI...

EUVD-2023-1611

Malicious code in bioql PyPI...

EUVD-2024-38258

Malicious code in bioql PyPI...

EUVD-2022-7090

Malicious code in bioql PyPI...

EUVD-2022-3793

Malicious code in bioql PyPI...

EUVD-2022-3248

Malicious code in bioql PyPI...

EUVD-2023-2500

Malicious code in bioql PyPI...

EUVD-2024-0341

Malicious code in bioql PyPI...

EUVD-2024-45992

Malicious code in bioql PyPI...

EUVD-2023-2695

Malicious code in bioql PyPI...

EUVD-2022-0587

Malicious code in bioql PyPI...

DEBIAN-CVE-2025-59432

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...

UBUNTU-CVE-2025-59432

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...

CVE-2024-47869

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a timing attack in the way Gradio compares hashes for the analyticsdashboard function. Since the comparison is not done in constant time, an attacker could exploit this by measuring the response ti...

CVE-2024-23903

Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token...