EUVD-2024-0419

Malicious code in bioql PyPI...

EUVD-2022-6638

Malicious code in bioql PyPI...

EUVD-2024-34769

Malicious code in bioql PyPI...

EUVD-2023-2463

Malicious code in bioql PyPI...

Denial Of Service (DoS)

github.com/hashicorp/vault is vulnerable to Denial of Service DoS. The vulnerability is due to processing specially crafted complex payloads within the default request size limit, which allows an attacker to consume excessive memory and CPU resources...

Malicious code in vault-hux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-47516 Malicious code in vault-hux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-47515 Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

Keycloak < 26.2.9 Multiple Vulnerabilities (GHSA-wc64-wmfm-46vw)(GHSA-xmcw-mv9p-7pq2)

The version of Keycloak installed on the remote host is prior to 26.2.9. It is, therefore, affected by multiple vulnerabilities as reference in the advisory GHSA-wc64-wmfm-46vw and GHSA-xmcw-mv9p-7pq2. - A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The...

PT-2025-39231

Yes, Zoho has faced several security issues: - 2021: ManageEngine ADSelfService Plus vulnerability CVE-2021-40539 exploited by APT27, affecting 9+ organizations and 11,000+ servers with Godzilla Webshell malware. Patched by Zoho. - 2022: Critical RCE flaw in ManageEngine led to BankingLab breach,...

No title provided

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator . As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: lvm-driver, checksec, kubeflow-katib, docker-credential-ecr-login, custom-pod-autoscaler-operator, container-object-storage-interface, rancher-machine, secrets-store-csi-driver-provider-aws, terraform-provider-time, kserve-rest-proxy, vault-benchmark,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: lvm-driver, checksec, kubeflow-katib, docker-credential-ecr-login, custom-pod-autoscaler-operator, container-object-storage-interface, rancher-machine, secrets-store-csi-driver-provider-aws, terraform-provider-time, kserve-rest-proxy, vault-benchmark,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, newrelic-nri-statsd, k8sgpt-operator, wazero-fips, secrets-store-csi-driver-provider-aws, kube-logging-operator-custom-runner-fips, consul-fips, kube-vip-cloud-provider, prometheus-bind-exporter, karpenter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, newrelic-nri-statsd, k8sgpt-operator, wazero-fips, secrets-store-csi-driver-provider-aws, kube-logging-operator-custom-runner-fips, consul-fips, kube-vip-cloud-provider, prometheus-bind-exporter, karpenter,...

PT-2025-38403

Name of the Vulnerable Software and Affected Versions Vault affected versions not specified Chrome affected versions not specified Description The reported issue concerns authentication flaws within AWS and a denial-of-service condition related to JSON processing in Vault. Additionally, a...

SUSE CVE-2025-6203

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault's auditing subroutine, potentially resulting in the Vault server to become...

GO-2025-3924 HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads in github.com/hashicorp/vault

HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads in github.com/hashicorp/vault...

PT-2025-36648

HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads in github.com/hashicorp/vault...