3336 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an injection attack in huggingface/transformers [CVE-2025-3777]
Summary IBM Watson Speech Services Cartridge is vulnerable to an injection attack in huggingface/transformers, due to an improper input validation vulnerability in the imageutils.py file CVE-2025-3777, Huggingface/transformers is used in our speech service runtimes. This vulnerabilitiy has been...
Malicious code in ecto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81e1cdd6102c7565db6c5e0e23b7776c666391fcaf74dd0dda3d9abc4a001f The package ecto-utils was found to contain malicious code...
MAL-2025-49301 Malicious code in spectral-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b1d60d661e6371af32c270f14fcb010fbb6dbebca0f1ecdf268ec1c048a957 The package spectral-utils was found to contain malicious code...
CVE-2020-36867 Nagios XI < 5.7.3 Command Injection in Report PDF Download
Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality. User-supplied values used in the PDF generation pipeline or the wrapper that invokes offline/pdf helper utilities were insufficiently validated or improperly escaped,...
EUVD-2025-37115
Malicious code in epic-path-utils npm...
Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...
EUVD-2025-37188
Malicious code in @ra-web-tech-ui-toolkit/common-utils npm...
Keras 安全漏洞
Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras that stems from the keras.utils.getfile API not using the filter=data function when processing tarballs, which could lead to path traversal attacks...
Malicious Package
Overview firefly-utilities-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in firefly-utilities-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b473a3935398e8bbe5ca323982f141f6961f34964660c00cc78fb21d922af The package firefly-utilities-js was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-36847
Malicious code in firefly-utilities-js npm...
MAL-2025-49005 Malicious code in firefly-utilities-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b473a3935398e8bbe5ca323982f141f6961f34964660c00cc78fb21d922af The package firefly-utilities-js was found to contain malicious code. Source: ghsa-malware...
OPENSUSE-SU-2025:15675-1 coreboot-utils-25.09-2.1 on GA media
These are all security issues fixed in the coreboot-utils-25.09-2.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2025-36088
Malicious code in tailwind-utils-plus npm...
Malicious code in tailwind-utils-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed8ff35970f72cb3baab16f272e85ee20139056fb86d4c04e90b28ba38f464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview tailwind-utils-plus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview discord-utils-enhanced is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious code in discord-utils-enhanced (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d1a77a40407ca303a4cb46ec3bafa609ffa4d3e354eac59e799a499fb4b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48592 Malicious code in discord-utils-enhanced (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d1a77a40407ca303a4cb46ec3bafa609ffa4d3e354eac59e799a499fb4b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...