# Vulnerabilities published in 2025


- [OSV-2025-111](https://insights.sbomify.com/OSV-2025-111/): Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix (not scored)
- [OSV-2025-108](https://insights.sbomify.com/OSV-2025-108/): Use-of-uninitialized-value in decimate_dsd_run (not scored)
- [OSV-2025-107](https://insights.sbomify.com/OSV-2025-107/): Use-of-uninitialized-value in get_words_lossless (not scored)
- [OSV-2025-105](https://insights.sbomify.com/OSV-2025-105/): Heap-use-after-free in unpack_dsd_samples (not scored)
- [OSV-2025-1049](https://insights.sbomify.com/OSV-2025-1049/): Heap-buffer-overflow in unsigned char* std::__1::vector<unsigned char, std::__1::allocator<unsigned char (not scored)
- [OSV-2025-1039](https://insights.sbomify.com/OSV-2025-1039/): UNKNOWN WRITE in fuzz_regexp (not scored)
- [OSV-2025-1020](https://insights.sbomify.com/OSV-2025-1020/): Heap-buffer-overflow in mmcall (not scored)
- [OSV-2025-1018](https://insights.sbomify.com/OSV-2025-1018/): Stack-buffer-overflow in lre_exec (not scored)
- [OSV-2025-1016](https://insights.sbomify.com/OSV-2025-1016/): Use-of-uninitialized-value in js_create_function (not scored)
- [OSV-2025-1004](https://insights.sbomify.com/OSV-2025-1004/): Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal (not scored)
- [OSV-2025-1001](https://insights.sbomify.com/OSV-2025-1001/): Dynamic-stack-buffer-overflow in _ox_err_set_with_location (not scored)
- [OSV-2025-1](https://insights.sbomify.com/OSV-2025-1/): Segv on unknown address in avif_fuzztest_properties@PropertiesAvifFuzzTest.PropsValid (not scored)
- [OSV-2024-1446](https://insights.sbomify.com/OSV-2024-1446/): Segv on unknown address in glslang::TIntermediate::addSymbol (not scored)
- [OSV-2024-1427](https://insights.sbomify.com/OSV-2024-1427/): Heap-buffer-overflow in extract_mediaip (not scored)
- [OSV-2024-1424](https://insights.sbomify.com/OSV-2024-1424/): Heap-buffer-overflow in extract_candidate (not scored)
- [OSV-2024-1423](https://insights.sbomify.com/OSV-2024-1423/): Security exception in java.base/java.util.Arrays.copyOfRange (not scored)
- [OSV-2024-1417](https://insights.sbomify.com/OSV-2024-1417/): Heap-buffer-overflow in cv::PngDecoder::read_from_io (not scored)
- [OSV-2022-1292](https://insights.sbomify.com/OSV-2022-1292/): Heap-buffer-overflow in LibRaw::phase_one_correct (not scored)
- [MAL-2026-47](https://insights.sbomify.com/MAL-2026-47/): Malicious code in tiny-model-update (npm) (malicious package)
- [MAL-2026-46](https://insights.sbomify.com/MAL-2026-46/): Malicious code in github-badge-bot (npm) (malicious package)
- [MAL-2026-184](https://insights.sbomify.com/MAL-2026-184/): Malicious code in yunxohang4 (npm) (malicious package)
- [MAL-2026-170](https://insights.sbomify.com/MAL-2026-170/): Malicious code in secguest-react-lib (npm) (malicious package)
- [MAL-2026-169](https://insights.sbomify.com/MAL-2026-169/): Malicious code in secguest-lib (npm) (malicious package)
- [MAL-2026-134](https://insights.sbomify.com/MAL-2026-134/): Malicious code in meta-code-verify (npm) (malicious package)
- [MAL-2025-99999](https://insights.sbomify.com/MAL-2025-99999/): Malicious code in blank_heron_z3n (npm) (malicious package)
- [MAL-2025-99998](https://insights.sbomify.com/MAL-2025-99998/): Malicious code in blank_canid_0xrequest (npm) (malicious package)
- [MAL-2025-99997](https://insights.sbomify.com/MAL-2025-99997/): Malicious code in bjlnfu-devapptea (npm) (malicious package)
- [MAL-2025-99996](https://insights.sbomify.com/MAL-2025-99996/): Malicious code in bizarre_porcupine-appteadev (npm) (malicious package)
- [MAL-2025-99995](https://insights.sbomify.com/MAL-2025-99995/): Malicious code in bizarre_partridge_0xrequest (npm) (malicious package)
- [MAL-2025-99994](https://insights.sbomify.com/MAL-2025-99994/): Malicious code in bizarre_constrictor-strongdev (npm) (malicious package)
- [MAL-2025-99993](https://insights.sbomify.com/MAL-2025-99993/): Malicious code in bizarre_chicken-smiletea (npm) (malicious package)
- [MAL-2025-99992](https://insights.sbomify.com/MAL-2025-99992/): Malicious code in bizarre_catfish-gooddev (npm) (malicious package)
- [MAL-2025-99991](https://insights.sbomify.com/MAL-2025-99991/): Malicious code in bizarre_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-99990](https://insights.sbomify.com/MAL-2025-99990/): Malicious code in bitter_spoonbill_z3n (npm) (malicious package)
- [MAL-2025-9999](https://insights.sbomify.com/MAL-2025-9999/): Malicious code in @zalastax/nolb-_extre (npm) (malicious package)
- [MAL-2025-99989](https://insights.sbomify.com/MAL-2025-99989/): Malicious code in bitter_porcupine_dumbs (npm) (malicious package)
- [MAL-2025-99988](https://insights.sbomify.com/MAL-2025-99988/): Malicious code in bitter_piranha_z3n (npm) (malicious package)
- [MAL-2025-99987](https://insights.sbomify.com/MAL-2025-99987/): Malicious code in bitter_lemur_dumbs (npm) (malicious package)
- [MAL-2025-99986](https://insights.sbomify.com/MAL-2025-99986/): Malicious code in bitter_damselfly_z3n (npm) (malicious package)
- [MAL-2025-99985](https://insights.sbomify.com/MAL-2025-99985/): Malicious code in biological_xerinae-appteadev (npm) (malicious package)
- [MAL-2025-99984](https://insights.sbomify.com/MAL-2025-99984/): Malicious code in biological_walrus-appteadev (npm) (malicious package)
- [MAL-2025-99983](https://insights.sbomify.com/MAL-2025-99983/): Malicious code in biological_krill-excellentdev (npm) (malicious package)
- [MAL-2025-99982](https://insights.sbomify.com/MAL-2025-99982/): Malicious code in biological_clownfish_z3n (npm) (malicious package)
- [MAL-2025-99981](https://insights.sbomify.com/MAL-2025-99981/): Malicious code in biological_chimpanzee-appteadev (npm) (malicious package)
- [MAL-2025-99980](https://insights.sbomify.com/MAL-2025-99980/): Malicious code in binding_tiger_z3n (npm) (malicious package)
- [MAL-2025-9998](https://insights.sbomify.com/MAL-2025-9998/): Malicious code in @zalastax/nolb-_extraw (npm) (malicious package)
- [MAL-2025-99979](https://insights.sbomify.com/MAL-2025-99979/): Malicious code in binding_magpie-appteadev (npm) (malicious package)
- [MAL-2025-99978](https://insights.sbomify.com/MAL-2025-99978/): Malicious code in binding_ladybug-appteadev (npm) (malicious package)
- [MAL-2025-99977](https://insights.sbomify.com/MAL-2025-99977/): Malicious code in binding_grouse_dumbs (npm) (malicious package)
- [MAL-2025-99976](https://insights.sbomify.com/MAL-2025-99976/): Malicious code in binding_ferret_0xrequest (npm) (malicious package)
- [MAL-2025-99975](https://insights.sbomify.com/MAL-2025-99975/): Malicious code in binding_cow-strongdev (npm) (malicious package)
- [MAL-2025-99974](https://insights.sbomify.com/MAL-2025-99974/): Malicious code in binding_cougar_z3n (npm) (malicious package)
- [MAL-2025-99973](https://insights.sbomify.com/MAL-2025-99973/): Malicious code in biliren-notthedevs (npm) (malicious package)
- [MAL-2025-99972](https://insights.sbomify.com/MAL-2025-99972/): Malicious code in big_wildcat-appteadev (npm) (malicious package)
- [MAL-2025-99971](https://insights.sbomify.com/MAL-2025-99971/): Malicious code in big_sparrow-apptea (npm) (malicious package)
- [MAL-2025-99970](https://insights.sbomify.com/MAL-2025-99970/): Malicious code in big_puffin_dumbs (npm) (malicious package)
- [MAL-2025-9997](https://insights.sbomify.com/MAL-2025-9997/): Malicious code in @zalastax/nolb-_extra (npm) (malicious package)
- [MAL-2025-99969](https://insights.sbomify.com/MAL-2025-99969/): Malicious code in big_peafowl-smiletea (npm) (malicious package)
- [MAL-2025-99968](https://insights.sbomify.com/MAL-2025-99968/): Malicious code in big_meadowlark_0xrequest (npm) (malicious package)
- [MAL-2025-99967](https://insights.sbomify.com/MAL-2025-99967/): Malicious code in big_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-99966](https://insights.sbomify.com/MAL-2025-99966/): Malicious code in big_eel_z3n (npm) (malicious package)
- [MAL-2025-99965](https://insights.sbomify.com/MAL-2025-99965/): Malicious code in big_bug_chocolate-51 (npm) (malicious package)
- [MAL-2025-99964](https://insights.sbomify.com/MAL-2025-99964/): Malicious code in big_bug-silentdev (npm) (malicious package)
- [MAL-2025-99963](https://insights.sbomify.com/MAL-2025-99963/): Malicious code in bibimbap-notthedevs (npm) (malicious package)
- [MAL-2025-99962](https://insights.sbomify.com/MAL-2025-99962/): Malicious code in bewildered_worm_0xrequest (npm) (malicious package)
- [MAL-2025-99961](https://insights.sbomify.com/MAL-2025-99961/): Malicious code in bewildered_whitefish_z3n (npm) (malicious package)
- [MAL-2025-99960](https://insights.sbomify.com/MAL-2025-99960/): Malicious code in bewildered_thrush-appteadev (npm) (malicious package)
- [MAL-2025-9996](https://insights.sbomify.com/MAL-2025-9996/): Malicious code in @zalastax/nolb-_extf (npm) (malicious package)
- [MAL-2025-99959](https://insights.sbomify.com/MAL-2025-99959/): Malicious code in bewildered_skink_z3n (npm) (malicious package)
- [MAL-2025-99958](https://insights.sbomify.com/MAL-2025-99958/): Malicious code in bewildered_pike-smiletea (npm) (malicious package)
- [MAL-2025-99957](https://insights.sbomify.com/MAL-2025-99957/): Malicious code in bewildered_hawk-appteadev (npm) (malicious package)
- [MAL-2025-99956](https://insights.sbomify.com/MAL-2025-99956/): Malicious code in bewildered_fish_0xrequest (npm) (malicious package)
- [MAL-2025-99955](https://insights.sbomify.com/MAL-2025-99955/): Malicious code in bewildered_beaver-silentdev (npm) (malicious package)
- [MAL-2025-99954](https://insights.sbomify.com/MAL-2025-99954/): Malicious code in better_unicorn_0xrequest (npm) (malicious package)
- [MAL-2025-99953](https://insights.sbomify.com/MAL-2025-99953/): Malicious code in better_tahr_dumbs (npm) (malicious package)
- [MAL-2025-99952](https://insights.sbomify.com/MAL-2025-99952/): Malicious code in better_roundworm-toolteadev (npm) (malicious package)
- [MAL-2025-99951](https://insights.sbomify.com/MAL-2025-99951/): Malicious code in better_penguin_0xrequest (npm) (malicious package)
- [MAL-2025-99950](https://insights.sbomify.com/MAL-2025-99950/): Malicious code in better_panther_z3n (npm) (malicious package)
- [MAL-2025-9995](https://insights.sbomify.com/MAL-2025-9995/): Malicious code in @zalastax/nolb-_exte (npm) (malicious package)
- [MAL-2025-99949](https://insights.sbomify.com/MAL-2025-99949/): Malicious code in better_mite_replicate_automation (npm) (malicious package)
- [MAL-2025-99948](https://insights.sbomify.com/MAL-2025-99948/): Malicious code in better_gerbil-appteadev (npm) (malicious package)
- [MAL-2025-99947](https://insights.sbomify.com/MAL-2025-99947/): Malicious code in bert-wallet-store (npm) (malicious package)
- [MAL-2025-99946](https://insights.sbomify.com/MAL-2025-99946/): Malicious code in bert-soluble-pot (npm) (malicious package)
- [MAL-2025-99945](https://insights.sbomify.com/MAL-2025-99945/): Malicious code in bernard-teadev (npm) (malicious package)
- [MAL-2025-99944](https://insights.sbomify.com/MAL-2025-99944/): Malicious code in bernadine-wallet-store (npm) (malicious package)
- [MAL-2025-99943](https://insights.sbomify.com/MAL-2025-99943/): Malicious code in bernadine-validator-catalyst (npm) (malicious package)
- [MAL-2025-99942](https://insights.sbomify.com/MAL-2025-99942/): Malicious code in bernadine-soluble-pot (npm) (malicious package)
- [MAL-2025-99941](https://insights.sbomify.com/MAL-2025-99941/): Malicious code in benton-wallet-store (npm) (malicious package)
- [MAL-2025-99940](https://insights.sbomify.com/MAL-2025-99940/): Malicious code in benton-soluble-pot (npm) (malicious package)
- [MAL-2025-9994](https://insights.sbomify.com/MAL-2025-9994/): Malicious code in @zalastax/nolb-_extc (npm) (malicious package)
- [MAL-2025-99939](https://insights.sbomify.com/MAL-2025-99939/): Malicious code in beneficial_mole-toolteadev (npm) (malicious package)
- [MAL-2025-99938](https://insights.sbomify.com/MAL-2025-99938/): Malicious code in beneficial_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-99937](https://insights.sbomify.com/MAL-2025-99937/): Malicious code in beneficial_haddock_z3n (npm) (malicious package)
- [MAL-2025-99936](https://insights.sbomify.com/MAL-2025-99936/): Malicious code in beneficial_duck_z3n (npm) (malicious package)
- [MAL-2025-99935](https://insights.sbomify.com/MAL-2025-99935/): Malicious code in beneficial_cow-appteadev (npm) (malicious package)
- [MAL-2025-99934](https://insights.sbomify.com/MAL-2025-99934/): Malicious code in beneficial_cougar_0xrequest (npm) (malicious package)
- [MAL-2025-99933](https://insights.sbomify.com/MAL-2025-99933/): Malicious code in beneficial_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-99932](https://insights.sbomify.com/MAL-2025-99932/): Malicious code in bella-ubi52-ruro (npm) (malicious package)
- [MAL-2025-99931](https://insights.sbomify.com/MAL-2025-99931/): Malicious code in bella-tool (npm) (malicious package)
- [MAL-2025-99930](https://insights.sbomify.com/MAL-2025-99930/): Malicious code in bella-telur47-ruro (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/5/