UBUNTU-CVE-2024-49953

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling xfrmstatedelete twice The km.state is not checked in driver's delayed work. When xfrmstatecheckexpire is called, the state can be reset to XFRMSTATEEXPIRED, even if it is XFRMSTATEDEAD...

MAL-2024-9771 Malicious code in plugin-transform-unicode-sets-regex (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9770 Malicious code in plugin-transform-unicode-property-regex (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9769 Malicious code in plugin-transform-private-property-in-object (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9768 Malicious code in plugin-transform-private-methods (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-private-methods (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-optional-chaining (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-object-rest-spread (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-numeric-separator (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9765 Malicious code in plugin-transform-numeric-separator (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-logical-assignment-operators (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9763 Malicious code in plugin-transform-export-namespace-from (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-export-namespace-from (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9762 Malicious code in plugin-transform-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-class-static-block (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9761 Malicious code in plugin-transform-class-static-block (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-transform-async-generator-functions (npm)

--- -= Per source details. Do not edit below this line.=-...

bonding: fix xfrm real_dev null pointer dereference

...

@3t-transform/threeteeui (>=1.5.1, <=2.0.0-3tx-reskin.166), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938, <=6.0.2) +293 more potentially affected by CVE-2024-45801 via dompurify (>=3.0.0, <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2021101222132, =0.9.4 and more Source cves: CVE-2024-45801 Source advisory: MEND:CVE-2024-45801...