OSV.dev · 实时热榜

TuxCare security update for 38 packages (2 CVEs) Affected packages: TuxCare:Maven/org.apache.tomcat.embed:tomcat-embed-core、TuxCare:Maven/org.apache.tomcat.embed:tomcat-embed-el、TuxCare:Maven/org.apache.tomcat.embed:tomcat-embed-jasper、TuxCare:Maven/org.apache.tomcat.embed:tomcat-embed-websocket、TuxCare:Maven/org.apache.tomcat.experimental:tomcat-embed-programmatic、... 33 more Attributes: Fix available

Affected packages: Debian:11/lemonldap-ng、Debian:12/lemonldap-ng、Debian:13/lemonldap-ng、Debian:14/lemonldap-ng Attributes: No fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Affected packages: Debian:11/linux、Debian:12/linux、Debian:13/linux、Debian:14/linux Attributes: Fix available

Affected packages: Debian:13/c-ares、Debian:14/c-ares Attributes: Fix available

Affected packages: Debian:11/svxlink、Debian:12/svxlink、Debian:13/svxlink、Debian:14/svxlink Attributes: Fix available

Affected packages: Echo/gst-plugins-bad1.0 Attributes: No fix available

Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available

ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function... Affected packages: Julia/Ncurses_jll Attributes: Fix available、Severity - 7.8 (High)

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in... Affected packages: Julia/Glib_jll Attributes: Fix available、Severity - 8.2 (High)

Affected packages: Julia/LibModbus_jll Attributes: Fix available、Severity - 7.8 (High)

Malicious code in bigtime (PyPI) Affected packages: PyPI/bigtime Attributes: No fix available

Malicious code in dlmm (PyPI) Affected packages: PyPI/dlmm Attributes: No fix available

Malicious code in dlmm-sdk (PyPI) Affected packages: PyPI/dlmm-sdk Attributes: No fix available

Malicious code in newtun (npm) Affected packages: npm/newtun Attributes: No fix available

Malicious code in @nzeros/codebreak (npm) Affected packages: npm/@nzeros/codebreak Attributes: No fix available

Updated openslide packages fix a security vulnerability Affected packages: Mageia:10/openslide Attributes: Fix available

Affected packages: MinimOS/vllm-cu130 Attributes: Fix available

Affected packages: MinimOS/jupyterhub Attributes: Fix available

Red Hat Security Advisory: nodejs22 security update Affected packages: Red Hat:enterprise_linux_eus:10.0/nodejs、Red Hat:enterprise_linux_eus:10.0/nodejs-debuginfo、Red Hat:enterprise_linux_eus:10.0/nodejs-devel、Red Hat:enterprise_linux_eus:10.0/nodejs-docs、Red Hat:enterprise_linux_eus:10.0/nodejs-full-i18n、... 6 more Attributes: Fix available、Severity - 7.5 (High)

Moderate: libarchive security update Affected packages: Rocky Linux:9/libarchive Attributes: Fix available、Severity - 7.5 (High)

Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) Affected packages: crates.io/orx-split-vec Attributes: Fix available

Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: Fix available

TuxCare security update for symfony/yaml (1 CVE) Affected packages: TuxCare:Packagist/symfony/yaml Attributes: Fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Affected packages: Debian:11/glibc、Debian:12/glibc、Debian:13/glibc、Debian:14/glibc Attributes: No fix available

Affected packages: Debian:13/linux、Debian:14/linux Attributes: Fix available

Affected packages: Debian:11/svxlink、Debian:12/svxlink、Debian:13/svxlink、Debian:14/svxlink Attributes: Fix available

Affected packages: Echo/qtbase-opensource-src Attributes: Fix available

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the... Affected packages: Julia/Glib_jll Attributes: Fix available、Severity - 7.5 (High)

Affected packages: Julia/LibModbus_jll Attributes: Fix available、Severity - 9.8 (Critical)

Malicious code in plp-contract (PyPI) Affected packages: PyPI/plp-contract Attributes: No fix available

Malicious code in joule-btp-extension (PyPI) Affected packages: PyPI/joule-btp-extension Attributes: No fix available

Malicious code in @aerodrome-finance/contracts (npm) Affected packages: npm/@aerodrome-finance/contracts Attributes: No fix available

Updated php8.4 packages fix security vulnerabilities Affected packages: Mageia:10/php8.4 Attributes: Fix available

Affected packages: MinimOS/virt-exportserver-1.8 Attributes: Fix available

Affected packages: MinimOS/python-3.10、MinimOS/python-3.10-base、MinimOS/python-3.10-base-dev、MinimOS/python-3.10-dev、MinimOS/python-3.10-doc Attributes: Fix available

Affected packages: MinimOS/grype Attributes: Fix available

Affected packages: MinimOS/python-3.12、MinimOS/python-3.12-base、MinimOS/python-3.12-base-dev、MinimOS/python-3.12-dev、MinimOS/python-3.12-doc、... 1 more Attributes: Fix available

Red Hat Security Advisory: resource-agents security update Affected packages: Red Hat:enterprise_linux:8::highavailability/resource-agents、Red Hat:enterprise_linux:8::highavailability/resource-agents-aliyun、Red Hat:enterprise_linux:8::highavailability/resource-agents-aliyun-debuginfo、Red Hat:enterprise_linux:8::highavailability/resource-agents-debuginfo、Red Hat:enterprise_linux:8::highavailability/resource-agents-debugsource、... 9 more Attributes: Fix available、Severity - 7.5 (High)

Important: vim security update Affected packages: Rocky Linux:10/vim Attributes: Fix available、Severity - 7.3 (High)

Moderate: kernel-rt security update Affected packages: Rocky Linux:8/kernel-rt Attributes: Fix available、Severity - 5.5 (Medium)

CVE-2024-52304 in aiohttp - Patched by Root Affected packages: Root:PyPI/aiohttp、Root:PyPI/rootio-aiohttp Attributes: Fix available、Severity - 7.5 (High)

CVE-2025-27613 in git - Patched by Root Affected packages: Root:Ubuntu:22.04/git、Root:Ubuntu:22.04/rootio-git Attributes: Fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Affected packages: Debian:11/linux、Debian:12/linux、Debian:13/linux、Debian:14/linux Attributes: Fix available

Affected packages: Debian:13/c-ares、Debian:14/c-ares Attributes: Fix available

Affected packages: Debian:11/svxlink、Debian:12/svxlink、Debian:13/svxlink、Debian:14/svxlink Attributes: Fix available

Affected packages: Echo/qtbase-opensource-src Attributes: Fix available

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used... Affected packages: Julia/Glib_jll Attributes: Fix available、Severity - 8.2 (High)