MAL-2025-191118 Malicious code in kinvey-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd908bc42e771527ecff3b0ef336122eb8d484f23f0402f511ca30dcb7b37dc The package kinvey-cli-wrapper was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199129

Malicious code in kinvey-cli-wrapper npm...

Malicious code in kinvey-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd908bc42e771527ecff3b0ef336122eb8d484f23f0402f511ca30dcb7b37dc The package kinvey-cli-wrapper was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @ensdomains/name-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfefd8b0b2d182a283e0934b365d98833a12639552eab96ebe6b69572c15c0d The package @ensdomains/name-wrapper was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198870

Malicious code in @ensdomains/name-wrapper npm...

MAL-2025-190807 Malicious code in @ensdomains/name-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfefd8b0b2d182a283e0934b365d98833a12639552eab96ebe6b69572c15c0d The package @ensdomains/name-wrapper was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64182

A memory-safety vulnerability has been identified in the Python bindings of OpenEXR, where improper checks on image channels and attribute stealing operations may result in buffer overflow when processing crafted EXR files or Python objects. An attacker supplying a malicious EXR file or crafted...

GO-2025-4119 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance in github.com/aws/aws-advanced-go-wrapper/awssql

AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance in github.com/aws/aws-advanced-go-wrapper/awssql...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious code with elevated privileges by creating crafted functions with names that...

Uncontrolled Search Path Element

Overview aws-advanced-nodejs-wrapper is a Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious code with elevated privileges by creating...

Uncontrolled Search Path Element

Overview software.amazon.jdbc:aws-advanced-jdbc-wrapper is an Amazon Web Services AWS Advanced JDBC Wrapper Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker...

Uncontrolled Search Path Element

Overview awsadvancedpythonwrapper is an Amazon Web Services AWS Advanced Python Driver Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious...

GHSA-8WJ8-CFXR-9374 AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

EUVD-2025-180214

AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance...

AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

GHSA-7WQ2-32H4-9HC9 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

EUVD-2025-180216

AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance...

AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...