MAL-2022-712 Malicious code in @w3-commons/js-build-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7872915f84a85c03dfe50e7b7cef0787845ceaad3aac20ea1c20b7a844eb01e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worki-js-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd46f5982dc0d64dac7abec613ce7dbf5cf64558ca53ac0b983350a178136152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youla-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b6fd2538a87fd893e2acb253f72093c7d1b5b6eace2522148a601114b12c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7226 Malicious code in worki-js-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd46f5982dc0d64dac7abec613ce7dbf5cf64558ca53ac0b983350a178136152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in external-js-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c06d2f4db7e9efc9676f195c4794c9b02fb52e277ad85db8059db8803081e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2940 Malicious code in external-js-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c06d2f4db7e9efc9676f195c4794c9b02fb52e277ad85db8059db8803081e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4478 Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2869 Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-XVF7-4V9Q-58W6 Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3472 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1, <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2022-25851 Source advisory: OSV:GHSA-XVF7-4V9Q-58W6...

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3472 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1, <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2022-25851 Source advisory: GHSA-XVF7-4V9Q-58W6...

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

Design/Logic Flaw

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851

CVE-2022-25851 affects the jpeg-js package prior to 0.4.4, with a Denial of Service caused by improper input validation that can trigger an infinite loop. IBM’s security bulletin clarifies impact to IBM Edge Application Manager (versions 4.3 and 4.4) and notes the existence of fixes via a docker ...

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...