MAL-2025-149038 Malicious code in ursa-algol-ganymede-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c303cf7884f70151ed9e6b5bf9c2c7e507450c13a216a7ce95ae230cb4f238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

TencentOS Server 2: squid (TSSA-2025:0788)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0788 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

EUVD-2025-23392

Malicious code in bioql PyPI...

EUVD-2019-4121

Malicious code in bioql PyPI...

Oracle Linux 7 : squid (ELSA-2025-14414)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-14414 advisory. - Fixes CVE-2025-54574, add URN access disabling config options Orabug: 38350105 Tenable has extracted the preceding description block directly from t...

squid security update

7:3.5.20-17.0.7.13 - Fixes CVE-2025-54574, add URN access disabling config options Orabug: 38350105 7:3.5.20-17.0.5.13 - Fixed cve 2023-46846 for http and icap request/response smuggling Orabug: 37326730...

CLSA-2025-1757076749 Fix CVE(s): CVE-2025-54574

SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...

CLSA-2025-1757076677 Fix CVE(s): CVE-2025-54574

SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...

squid: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

squid34: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

CLSA-2025-1757015131 squid: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

CLSA-2025-1757015024 squid: Fix of CVE-2025-54574

CVE-2025-54574: fix heap buffer overflow in URN parsing...

CLSA-2025-1757014622 squid34: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

CLSA-2025-1757010850 squid: Fix of CVE-2025-54574

CVE-2025-54574: fix heap buffer overflow in URN parsing...

Linux Distros Unpatched Vulnerability : CVE-2021-28651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with...

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Astra Linux – Vulnerability in Squid

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URNs due to incorrect buffer management. This issue has been fixed in version 6.4. To address this problem, disable URN access...

SUSE CVE-2025-54574

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access...

Exploit for Out-of-bounds Write in Squid-Cache Squid

🛑 CVE-2025-54574 — Heap Buffer Overflow in Squid ≤ 6.3 🛑...

CVE-2025-54574

A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution. Mitigation Users can disable URN access permissions to mitigate this issue...