MAL-2024-1961 Malicious code in ccl-utils-belt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3808 Malicious code in @chegg-me-lpc/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @b2bgeo/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7069 Malicious code in @b2bgeo/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @chegg-me-lpc/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-34JH-P97F-MPXF vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kubeflow-pipelines, jwt-tool, az, confluent-docker-utils, checkov, ggshield, superset, airflow, kubeflow-pipelines-visualization-server, py3-pipenv, kubeflow-volumes-web-app, py3-cassandra-medusa, dask-gateway, mlflow, kubeflow-jupyter-web-app,...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kubeflow-pipelines, jwt-tool, az, confluent-docker-utils, checkov, ggshield, superset, airflow, kubeflow-pipelines-visualization-server, py3-pipenv, kubeflow-volumes-web-app, py3-cassandra-medusa, dask-gateway, mlflow, kubeflow-jupyter-web-app,...

OPENSUSE-SU-2024:12537-1 caca-utils-0.99.beta20-1.1 on GA media

These are all security issues fixed in the caca-utils-0.99.beta20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12087-1 cifs-utils-6.15-1.1 on GA media

These are all security issues fixed in the cifs-utils-6.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13318-1 erofs-utils-1.7-1.1 on GA media

These are all security issues fixed in the erofs-utils-1.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10927-1 caca-utils-0.99.beta19.git20171003-8.3 on GA media

These are all security issues fixed in the caca-utils-0.99.beta19.git20171003-8.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10334-1 cifs-utils-6.5-1.5 on GA media

These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11518-1 xdg-utils-1.1.3+20201113-1.2 on GA media

These are all security issues fixed in the xdg-utils-1.1.3+20201113-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12029-1 caca-utils-0.99.beta19.git20171003-9.1 on GA media

These are all security issues fixed in the caca-utils-0.99.beta19.git20171003-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10683-1 cifs-utils-6.13-1.3 on GA media

These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed...

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-25142 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-25142 Source advisory:...

CVE-2024-37877: Out-of-bounds Read

UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octetview.cpp and in function DecodeRlsMessage in src/lib/rls/rlspdu.cpp...

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +2 more potentially affected by CVE-2024-37300 via oauthenticator (0.13.0)

oauthenticator PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - jupyterhubutils =0.11.0, =0.9.1, =0.30.1, =0.0.2, =0.4.2 Source cves: CVE-2024-37300 Source advisory: OSV:GHSA-GPRJ-3P75-F996...

Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...