OSV - Open Source Vulnerabilities

MAL-2025-19853

npm/eslint-plugin-es-spec

Malicious code in eslint-plugin-es-spec (npm)

14 Aug

No fix available

RLSA-2025:9318

Rocky Linux:8/ant
Rocky Linux:8/ant-contrib
Rocky Linux:8/antlr
Rocky Linux:8/aopalliance
Rocky Linux:8/apache-commons-beanutils
... 177 more

Important: javapackages-tools:201801 security update

29 Jul

Fix available
Severity - 8.8 (High)

RHSA-2025:9318

Red Hat:enterprise_linux:8::crb/ant
Red Hat:enterprise_linux:8::crb/ant-antlr
Red Hat:enterprise_linux:8::crb/ant-apache-bcel
Red Hat:enterprise_linux:8::crb/ant-apache-bsf
Red Hat:enterprise_linux:8::crb/ant-apache-log4j
... 511 more

Red Hat Security Advisory: javapackages-tools:201801 security update

23 Jun

Fix available
Severity - 8.8 (High)

ALSA-2025:9318

AlmaLinux:8/ant
AlmaLinux:8/ant-antlr
AlmaLinux:8/ant-apache-bcel
AlmaLinux:8/ant-apache-bsf
AlmaLinux:8/ant-apache-log4j
... 505 more

Important: javapackages-tools:201801 security update

23 Jun

Fix available

MAL-2025-4840

npm/karma-spec-filter

Malicious code in karma-spec-filter (npm)

10 Jun

No fix available

MAL-2025-2829

npm/@uniqa/user-preferences-ms-spec-api

Malicious code in @uniqa/user-preferences-ms-spec-api (npm)

28 Mar

No fix available

MAL-2025-2828

npm/@uniqa/user-account-spec-api

Malicious code in @uniqa/user-account-spec-api (npm)

28 Mar

No fix available

MAL-2025-2824

npm/@uniqa/self-registration-spec-api

Malicious code in @uniqa/self-registration-spec-api (npm)

28 Mar

No fix available

MAL-2025-2817

npm/@uniqa/digital-inventory-ms-spec-api

Malicious code in @uniqa/digital-inventory-ms-spec-api (npm)

28 Mar

No fix available

MAL-2025-2813

npm/@uniqa/contract-ms-spec-api

Malicious code in @uniqa/contract-ms-spec-api (npm)

28 Mar

No fix available

MAL-2025-2076

npm/@cdplinetest/user-account-spec

Malicious code in @cdplinetest/user-account-spec (npm)

04 Mar

No fix available

MAL-2025-1080

npm/core-exchange-spec

Malicious code in core-exchange-spec (npm)

03 Feb

No fix available

MAL-2025-715

npm/smartling-openapi-spec

Malicious code in smartling-openapi-spec (npm)

31 Jan

No fix available

GO-2025-3412

Go/github.com/compose-spec/compose-go/v2

Excessive resource consumption when unmarshalling Compose file with recursive loop in github.com/compose-spec/compose-go/v2

29 Jan

Fix available

GHSA-36gq-35j3-p9r9

Go/github.com/compose-spec/compose-go/v2

Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop

21 Jan

Fix available
Severity - 5.9 (Medium)

RHSA-2024:11560

Red Hat:jboss_enterprise_application_platform:8.0::el9/eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el9/eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el9/eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el9/eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el9/eap8-activemq-artemis-dto
... 104 more

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.5 Security update

20 Dec 2024

Fix available
Severity - 7.1 (High)