CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

PT-2025-45521

Name of the Vulnerable Software and Affected Versions CVAT versions 2.4.0 through 2.48.1 Description CVAT is an interactive video and image annotation tool for computer vision. A user with the User global role can potentially create or overwrite files in the root of a mounted file share. If a fil...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988680)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988680 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running generic/5...

EUVD-2025-37102

Malicious code in epic-service-worker npm...

MAL-2025-49116 Malicious code in epic-analytics-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001f66bdd59090dfeb452f1f9050ac62587a91713d8d4c2a7a3ec06a5e45abb7 The package epic-analytics-worker was found to contain malicious code...

EUVD-2025-37177

Malicious code in epic-analytics-worker npm...

EUVD-2025-37054

Malicious code in store-service-worker npm...

Malicious code in epic-analytics-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001f66bdd59090dfeb452f1f9050ac62587a91713d8d4c2a7a3ec06a5e45abb7 The package epic-analytics-worker was found to contain malicious code...

Malicious code in store-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...

Malicious code in epic-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...

MAL-2025-49239 Malicious code in store-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...

MAL-2025-49191 Malicious code in epic-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...

PT-2025-44367

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.0.5 Description A parameter in the example dag decorator dag was not properly validated, potentially allowing a user of the Airflow UI to redirect the example to a malicious server and execute code on a worke...

Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35771

Malicious code in generate-delta-worker npm...

Malicious Package

Overview generate-delta-worker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35776

Malicious code in create-artifact-worker npm...

MAL-2025-48560 Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48565 Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...