Aikido Threat Intelligence

@qwen-code/qwen-code is vulnerable to Command Injection

Upgrade the @qwen-code/qwen-code library to the patch version.

tkms is vulnerable to Uncontrolled Resource Consumption

Upgrade the tkms library to the patch version.

sigstat-grpc is vulnerable to Insertion of Sensitive Information into Log File

Upgrade the sigstat-grpc library to the patch version.

@remotion/studio-server is vulnerable to Improper Access Control

Upgrade the @remotion/studio-server library to the patch version.

github.com/apache/arrow-go/v18 is vulnerable to Uncaught Exception

Upgrade the github.com/apache/arrow-go/v18 library to the patch version.

pulpcore is vulnerable to Generation of Error Message Containing Sensitive Information

Upgrade the pulpcore library to the patch version.

@taquito/taquito is vulnerable to Cross-Site Scripting (XSS)

Upgrade the @taquito/taquito library to the patch version.

plexus-xml is vulnerable to Regular Expression Denial of Service (ReDoS)

Upgrade the org.codehaus.plexus:plexus-xml library to the patch version.

tensordict is vulnerable to Race Condition

Upgrade the tensordict library to the patch version.

@aws-amplify/cli is vulnerable to OS Command Injection

Upgrade the @aws-amplify/cli library to the patch version.