Malicious code in just-the-docs (npm)

The package just-the-docs was found to contain malicious code...

MAL-2025-14090 Malicious code in adform-docs (npm)

The package adform-docs was found to contain malicious code...

MAL-2025-24120 Malicious code in just-the-docs (npm)

The package just-the-docs was found to contain malicious code...

Malicious code in docs-reminder-action (npm)

The package docs-reminder-action was found to contain malicious code...

Malicious code in adform-docs (npm)

The package adform-docs was found to contain malicious code...

artery-routes-docs (>=0.0.2 <=0.0.25), arteryjs (=0.0.0) +5 more potentially affected by unknown CVE via to-slug (=0.0.0)

to-slug NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

Malicious code in otc-docs-language (npm)

The package otc-docs-language was found to contain malicious code...

MAL-2025-32878 Malicious code in secure-docs-app (npm)

The package secure-docs-app was found to contain malicious code...

MAL-2025-28608 Malicious code in otc-docs-language (npm)

The package otc-docs-language was found to contain malicious code...

Malicious code in bb-docs-dgeni (npm)

The package bb-docs-dgeni was found to contain malicious code...

MAL-2025-15530 Malicious code in bb-docs-dgeni (npm)

The package bb-docs-dgeni was found to contain malicious code...

MAL-2025-18573 Malicious code in docs-reminder-action (npm)

The package docs-reminder-action was found to contain malicious code...

Cisco Secure Firewall Management Center Software HTML Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An...

PT-2025-33417 · Hcl · Hcl Connections Docs

Name of the Vulnerable Software and Affected Versions: HCL Connections Docs affected versions not specified Description: HCL Connections Docs may not properly validate uploaded documents, potentially leading to a denial of service due to resource exhaustion. Recommendations: At the moment, there ...

HCL Connections Docs 安全漏洞

HCL Connections Docs is a documentation site of HCL India. A security vulnerability exists in HCL Connections Docs version 2.0.2, which stems from improper validation of uploaded documents and could result in a denial of service due to resource exhaustion...

Fedora: Security Advisory (FEDORA-2025-1a9ad70c05)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: overmind, k8ssandra-client, nri-postgresql, azuredisk-csi, db-operator, kubo-fips, secrets-store-csi-driver-provider-gcp, falcoctl, nvidia-nsight-compute-13.2, argo-workflows, amass, amazon-ssm-agent, yunikorn-web, azuredisk-csi-fips,...

Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-6800 Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...

mcp-package-docs vulnerable to command injection in several tools

Summary A command injection vulnerability exists in the mcp-package-docs MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code...