696 matches found
MAL-2025-45332 Malicious code in node-config-wolf-enif-eslint (npm)
The package node-config-wolf-enif-eslint was found to contain malicious code...
MAL-2025-45580 Malicious code in postgres-stratosphere-draco-wolf (npm)
The package postgres-stratosphere-draco-wolf was found to contain malicious code...
Malicious code in node-config-wolf-enif-eslint (npm)
The package node-config-wolf-enif-eslint was found to contain malicious code...
Malicious code in antd-dione-gridsome-wolf (npm)
The package antd-dione-gridsome-wolf was found to contain malicious code...
Malicious code in xo-wolf-playwright-nestjs (npm)
The package xo-wolf-playwright-nestjs was found to contain malicious code...
Malicious code in postgres-stratosphere-draco-wolf (npm)
The package postgres-stratosphere-draco-wolf was found to contain malicious code...
MAL-2025-46740 Malicious code in xo-wolf-playwright-nestjs (npm)
The package xo-wolf-playwright-nestjs was found to contain malicious code...
In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is called. This can lead to weak or predictable random numbers generated in applications that are both using RAND_bytes() and doing fork() operations. This only affects applications explicitly calling RAND_bytes() after fork() and does not affect any internal TLS operations. Although RAND_bytes() documentation in OpenSSL calls out not being safe for use with fork() without first calling RAND_poll(), an additional code change was also made in wolfSSL to make RAND_bytes() behave similar to OpenSSL after a fork() call without calling RAND_poll(). Now the Hash-DRBG used gets reseeded after detecting running in a new process. If making use of RAND_bytes() and calling fork() we recommend updating to the latest version of wolfSSL. Thanks to Per Allansson from Appgate for the report.
...
Linux Distros Unpatched Vulnerability : CVE-2022-39173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TL...
Linux Distros Unpatched Vulnerability : CVE-2021-37155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP...
Linux Distros Unpatched Vulnerability : CVE-2021-44718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a...
Malicious code in loop-wolf-vortex-yonder (npm)
The package loop-wolf-vortex-yonder was found to contain malicious code...
Malicious code in npm-chalk-wolf-aurora (npm)
The package npm-chalk-wolf-aurora was found to contain malicious code...
Malicious code in chalk-winston-wolf-semantic-release (npm)
The package chalk-winston-wolf-semantic-release was found to contain malicious code...
Malicious code in wolf-arcturus-parcel-juno (npm)
The package wolf-arcturus-parcel-juno was found to contain malicious code...
Malicious code in async-paleobotany-wolf-eslint-config (npm)
The package async-paleobotany-wolf-eslint-config was found to contain malicious code...
MAL-2025-39404 Malicious code in wolf-cache-inflation-selenium (npm)
The package wolf-cache-inflation-selenium was found to contain malicious code...
MAL-2025-15072 Malicious code in australis-commitlint-loopback-wolf (npm)
The package australis-commitlint-loopback-wolf was found to contain malicious code...