MAL-2024-11819 Malicious code in lana-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7484f94ee4543b03e2d833c9553eea0123b2a73f99621a2e99a38139146b151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.github.psi-probe:psi-probe-tomcat7 (3.5.3), com.github.waffle:waffle-tomcat7 (3.0.0) +7 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.107)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.5.3 - com.github.waffle:waffle-tomcat7 3.0.0 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.9), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.9) +1 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.9)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.9 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

com.kerb4j:kerb4j-server-tomcat (>=0.0.6, <=0.1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.27) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.27)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.kerb4j:kerb4j-server-tomcat =0.0.6, =0.1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.27...

org.apache.tomcat:tomcat-catalina-ha (8.5.39), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.39) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.39)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.39 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.dblock.waffle:waffle-tomcat8 (1.7.4), org.apache.tomcat:tomcat-catalina-ha (8.0.22) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.22)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.4 - org.apache.tomcat:tomcat-catalina-ha 8.0.22 ...

org.apache.tomcat:tomcat-catalina-ant (7.0.103), org.apache.tomcat:tomcat-catalina-ha (7.0.103) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.103)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.103 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.103 - org.apache.tomcat:tomcat-catalina-ha 7.0.10...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.0, <=1.8.1), org.apache.tomcat:tomcat-catalina-ha (8.0.0-rc10) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.0-rc10)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.0-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.0, =1.8.1 -...

com.github.psi-probe:psi-probe-tomcat85 (4.1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.96) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.96)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.96 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.96 ...

com.github.psi-probe:psi-probe-tomcat85 (3.5.9), org.apache.tomcat:tomcat-catalina-ha (8.5.79) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.79)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.79 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.9 - org.apache.tomcat:tomcat-catalina-ha 8.5.79 ...

com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.5)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...

com.github.psi-probe:psi-probe-tomcat85 (3.5.5), org.apache.tomcat:tomcat-catalina-ha (8.5.70) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.70)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.5 - org.apache.tomcat:tomcat-catalina-ha 8.5.70 ...

org.apache.tomcat:tomcat-catalina-ha (8.0.37), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.37) +4 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.37)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.37 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ha (8.5.97), org.apache.tomcat:tomcat-catalina-ws (8.5.97) +1 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.97)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.97 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.97 - org.apache.tomcat:tomcat-catalina-ws 8.5.97 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.7), org.apache.tomcat:tomcat-catalina-ha (8.5.75) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.75)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.7 - org.apache.tomcat:tomcat-catalina-ha 8.5.75 ...

org.apache.tomcat:tomcat-catalina-ant (7.0.11), org.apache.tomcat:tomcat-catalina-ha (7.0.11) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.11)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.11 - org.apache.tomcat:tomcat-catalina-ha 7.0.11 -...

nl.nlighten:tomcat_exporter_client (0.0.7), nl.nlighten:tomcat_exporter_servlet (0.0.7) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.33)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - nl.nlighten:tomcatexporterclient 0.0.7 - nl.nlighten:tomcatexporterservlet 0.0.7 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.43), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.43) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.43)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.43 - org.apache.tomcat:tomcat-catalina-jmx-remote...

io.antmedia:ant-media-server (>=2.6.3, <=2.7.0), org.apache.tomcat:tomcat-catalina-ha (8.5.90) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.90)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - io.antmedia:ant-media-server =2.6.3, =2.7.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.90 -...

org.apache.tomcat:tomcat-catalina-ant (7.0.106), org.apache.tomcat:tomcat-catalina-ha (7.0.106) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.106)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.106 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.106 - org.apache.tomcat:tomcat-catalina-ha 7.0.10...