@alancnet/material-framework (>=1.0.3, <=1.0.18), @alffiedev/alffie-components (>=1.0.0, <=1.0.13) +231 more potentially affected by CVE-2024-8372 via angular-messages (>=1.6.0, <=1.8.3)

angular-messages NPM version =1.6.0, =1.0.3, =1.0.0, =0.0.1, =0.2.1, =1.0.0-beta.2, =1.0.0, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.1, =1.4.3, =1.0.0, =1.0.0, =1.5.0 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@dankapusta/angular-bootstrap-calendar (0.20.1), @flagbit/ggm-components (0.9.11) +95 more potentially affected by CVE-2024-8372 via angular-touch (>=1.6.2, <=1.8.3)

angular-touch NPM version =1.6.2, =0.13.6, =0.1.0, =1.0.5, =3.0.0, =2.4.0, =1.3.0, =2.3.0, =2.3.2 - @w20/w20-dataviz 2.3.0 - @w20/w20-extras 2.3.0 - @w20/w20-material 2.2.0 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +689 more potentially affected by CVE-2024-8372 via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@covisint/cui-i18n (>=1.0.0, <=1.0.45), @covisint/cui-idm-b2x (>=1.0.1, <=1.3.0) +10 more potentially affected by CVE-2024-8372 via angular-i18n (>=1.2.32, <=1.5.11)

angular-i18n NPM version =1.2.32, =1.0.0, =1.0.1, =8.0.0, =0.0.1, =2.8.46, =2.8.16, =0.0.5, =1.0.0, =1.2.0, =1.24.0 Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@raptorjs/ng-portal (>=1.0.5, <=2.1.3) potentially affected by CVE-2024-8372 via angular-parse-ext (1.8.3)

angular-parse-ext NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-parse-ext and may be impacted: - @raptorjs/ng-portal =1.0.5, =2.1.3 Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100), @alancnet/material-framework (>=1.0.3, <=1.0.18) +236 more potentially affected by CVE-2024-8372 via angular-aria (>=1.6.0, <=1.8.3)

angular-aria NPM version =1.6.0, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.13.6, =1.0.1, =1.0.0, =1.0.0, =5.3.0, =1.0.1, =0.0.1, =1.0.5, =0.9.3, =0.1.0, =0.1.0, =0.18.9 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @alancnet/material-framework (>=1.0.3, <=1.0.18) +222 more potentially affected by CVE-2024-8372 via angular-route (>=1.6.1, <=1.8.3)

angular-route NPM version =1.6.1, =4.13.7-rc4, =1.0.3, =0.0.15, =0.0.7, =0.1.0, =1.0.0, =1.4.0, =0.0.5, =0.4.47, =1.0.0, =3.1.0, =3.0.11, =3.0.1, =3.0.3 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@amitport/useful (>=0.5.0, <=0.5.2), @covisint/cui-idm-b2x (>=1.2.4, <=1.3.0) +58 more potentially affected by CVE-2024-8372 via angular-messages (>=1.3.20, <=1.5.11)

angular-messages NPM version =1.3.20, =0.5.0, =1.2.4, =0.2.0, =0.1.0, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.1, =1.0.0, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =0.10.4, =1.3.0, =0.0.8, =0.0.10, =1.1.9, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @adplenty-tech/adplenty-components-library (>=1.4.156, <=1.9.100) +146 more potentially affected by CVE-2024-8372 via angular-cookies (>=1.6.0, <=1.8.3)

angular-cookies NPM version =1.6.0, =4.13.7-rc4, =1.4.156, =0.2.108, =0.0.1, =0.0.15, =0.1.0, =1.0.3, =0.2.1, =4.11.0, =4.0.0, =4.10.0, =4.13.5-1, =5.3.0, =1.0.5, =2.1.3 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

hslayers-ng (>=0.4.1, <=0.5.4) potentially affected by CVE-2024-8372 via angular-loader (1.4.14)

angular-loader NPM version 1.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on angular-loader and may be impacted: - hslayers-ng =0.4.1, =0.5.4 Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@amitport/useful (>=0.5.0, <=0.5.2), @bloomreach/hippo-theme (2.2.3) +46 more potentially affected by CVE-2024-8372 via angular-aria (>=1.4.5, <=1.5.11)

angular-aria NPM version =1.4.5, =0.5.0, =1.0.0, =1.0.0, =1.2.1, =2.4.0, =0.10.4, =4.0.0, =0.2.4, =0.0.4, =0.0.10, =0.0.1, =1.1.9, =2.1.9, =2.1.13 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@b1cloud/angular-weekly-scheduler (>=0.0.8, <=0.0.13), @covisint/cui-i18n (>=1.0.3, <=1.0.20) +33 more potentially affected by CVE-2024-8372 via angular-i18n (>=1.6.1, <=1.8.3)

angular-i18n NPM version =1.6.1, =0.0.8, =1.0.3, =0.2.1, =1.0.0, =1.0.0, =5.3.0, =3.0.0, =0.5.0, =1.1.0, =1.0.3, =1.1.0, =1.1.1 - apic-discount 1.0.0 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

@ardimedia/angular-portal-azure (>=0.2.2-beta, <=0.2.346), @benningfield-group/bgi (>=0.1.1, <=0.5.0) +184 more potentially affected by CVE-2024-8372 via angular-resource (>=1.6.1, <=1.8.3)

angular-resource NPM version =1.6.1, =0.2.2-beta, =0.1.1, =1.0.0, =1.0.0, =1.0.3, =0.2.1, =1.0.1, =2.0.0, =1.0.0, =0.5.0, =1.0.5, =0.9.3, =0.1.0, =0.11.7 and more Source cves: CVE-2024-8372 Source advisory: MEND:CVE-2024-8372...

Malicious code in coralui-support-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f192dd56f8538e6386f8ed29a314e1235df475bdb9630e5ec4b48b7bb8378fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in coralui-support-angular

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7943 Malicious code in coralui-support-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f192dd56f8538e6386f8ed29a314e1235df475bdb9630e5ec4b48b7bb8378fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7696 Malicious code in mva10-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbebcbc3b898726caa3bec8450b38747b8692941527db5fae805fc4d53e4d925 The OpenSSF Package Analysis project identified 'mva10-angular' @ 8.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mva10-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbebcbc3b898726caa3bec8450b38747b8692941527db5fae805fc4d53e4d925 The OpenSSF Package Analysis project identified 'mva10-angular' @ 8.2.0 npm as malicious. It is considered malicious because: - The package...