EUVD-2025-115108

Malicious code in concurrently-apex-promise-dotenv-parse-variables npm...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

EUVD-2025-120259

Malicious code in xenon-xenos-sadr-dotenv-parse-variables npm...

EUVD-2025-116626

Malicious code in apex-dotenv-parse-variables-wezen-ora npm...

EUVD-2025-114389

Malicious code in dotenv-parse-variables-eris-xenon-postcss npm...

EUVD-2025-122659

Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...

EUVD-2025-114369

Malicious code in dotenv-parse-variables-yonder-readable-vega npm...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990801 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcpmakesynack can be called from process context tcprtxsynack now could be called in process...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from uninitialized variable reads and could lead to a kernel bug...

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

EUVD-2025-106751

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

CVE-2025-40763

CVE-2025-40763 affects Altair Grid Engine (all versions

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

PT-2025-46562

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions through 4.1.15 Description Apache OpenOffice contains a missing authorization check when handling external links within documents. This allows an attacker to create a malicious document that loads external files...

PT-2025-46540

Name of the Vulnerable Software and Affected Versions Altair Grid Engine versions prior to 2026.0.0 Description The software does not properly validate environment variables when loading shared libraries, which can allow for path hijacking through malicious library substitution. A local attacker...

PT-2025-45637

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

PT-2025-45638

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

BIT-AIRFLOW-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

CVE-2025-12735

A vulnerability was discovered in the expr-eval npm package, a JavaScript library used to parse and evaluate mathematical expressions. The issue allows an attacker to define arbitrary functions within the context object used by the parser's evaluate method. By providing maliciously crafted input,...