280 matches found
EUVD-2026-23664
UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue...
CVE-2026-32228
UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue...
CVE-2026-32228
UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue...
CVE-2026-32228: Incorrect Authorization
UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue...
PT-2026-33594
Name of the Vulnerable Software and Affected Versions Airflow versions prior to 3.2.0 Description A user with asset materialize permission via the UI or API can trigger DAGs Directed Acyclic Graphs, which are collections of all the tasks you want to run, organized in a way that reflects their...
org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-23745 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)
org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-23745 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15032661...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
EUVD-2025-177710
Malicious code in nashira-materialize-publish-galaxy npm...
EUVD-2025-177557
Malicious code in nodejs-csrf-sagitta-materialize npm...
EUVD-2025-177935
Malicious code in materialize-repository-dione-aquarius npm...
EUVD-2025-178461
Malicious code in ichnology-materialize-neptune-karma npm...
EUVD-2025-178848
Malicious code in fornax-materialize-sails-dactyl npm...
EUVD-2025-180373
Malicious code in aquarius-quark-materialize-juno npm...
EUVD-2025-179405
Malicious code in dagda-tectonophysics-materialize-astrometry npm...
EUVD-2025-180023
Malicious code in blitz-materialize-link-lint-staged npm...
MAL-2025-187947 Malicious code in materialize-repository-dione-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b82c43f714b10f67dce4baed55a1a1ee8189351c594660d8c8ccd7e9f6990d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178816
Malicious code in fusion-nextjs-iota-materialize npm...