EUVD-2019-16807

Malware in sbrugna...

EUVD-2018-17198

Malware in sbrugna...

RockyLinux 10 : golang (RLSA-2025:13941)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13941 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the RockyLinux security advisor...

EUVD-2024-0458

Malicious code in bioql PyPI...

EUVD-2024-3017

Malicious code in bioql PyPI...

EUVD-2022-35057

Malicious code in bioql PyPI...

EUVD-2022-33061

Malicious code in bioql PyPI...

EUVD-2022-34559

Malicious code in bioql PyPI...

EUVD-2022-46405

Malicious code in bioql PyPI...

EUVD-2025-27562

Malicious code in bioql PyPI...

EUVD-2023-0200

Malicious code in bioql PyPI...

EUVD-2022-26181

Malicious code in bioql PyPI...

EUVD-2022-24766

Malicious code in bioql PyPI...

EUVD-2025-29525

Malicious code in bioql PyPI...

EUVD-2022-24803

Malicious code in bioql PyPI...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

OESA-2025-2260 golang security update

. Security Fixes: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VC...

CVE-2025-58763

Tautulli (Python-based Plex monitoring) has a command-injection vulnerability affecting v2.15.3 and earlier. The flaw arises when cloning from GitHub and installing manually, where the update/version logic calls runGit via subprocess.Popen with shell=True. The checkout_git_branch path stores un s...

go-toolset:rhel8 security update

An update is available for module.go-toolset, golang, module.delve, go-toolset, module.golang, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset...

OESA-2025-2182 golang security update

. Security Fixes: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VC...