Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.3 released 2025-10-13 includes fixes to the crypto/x509 package. bsc1244485 go75861 crypto/x509: TLS validation fails for FQDNs with trailing dot go75777 spec: Go1.25 spec should be dated closer to actual release date Further fixups to the...

PT-2025-42804

Name of the Vulnerable Software and Affected Versions Vite versions 2.9.18 through 3.0.0 Vite versions 3.2.9 through 4.0.0 Vite versions 4.5.3 through 5.0.0 Vite versions 5.2.6 through 5.4.21 Vite versions 6.0.0 through 6.4.1 Vite versions 7.0.0 through 7.0.8 Vite versions 7.1.0 through 7.1.11...

EUVD-2013-4349

Malware in sbrugna...

EUVD-2020-5902

Malware in sbrugna...

EUVD-2021-2069

Malware in sbrugna...

EUVD-2006-0820

Malware in sbrugna...

EUVD-1999-0968

Malware in sbrugna...

EUVD-2005-2892

Malware in sbrugna...

EUVD-2019-4547

Malware in sbrugna...

EUVD-2021-1397

Malware in sbrugna...

EUVD-2019-5978

Malware in sbrugna...

EUVD-2022-2842

Malicious code in bioql PyPI...

EUVD-2021-31062

Malicious code in bioql PyPI...

EUVD-2025-25029

Malicious code in bioql PyPI...

EUVD-2023-59777

Malicious code in bioql PyPI...

EUVD-2022-1164

Malicious code in bioql PyPI...

EUVD-2024-46774

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : coreutils Multiple Vulnerabilities (NS-SA-2025-0228)

The remote NewStart CGSL host, running version MAIN 6.06, has coreutils packages installed that are affected by multiple vulnerabilities: - Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c. CVE-2017-7476 ...

Django: Path traversal via archive.extract - CVE 2021-3281 incomplete patch

A vulnerability was discovered in the "extract" function of the ZipArchive and TarArchive classes in the Django framework. The vulnerability was caused by the use of the "abspath" function, which removes terminating path separators. This made the guard logic protection insufficient to protect...

Open Redirection

@astrojs/node is vulnerable to Open Redirection. The vulnerability is due to incorrect handling of double slashes with the Node deployment adapter in standalone mode and trailingSlash set to "always," allowing attackers to redirect users to malicious domains...