Malicious code in ok-message-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a80a6a3a1ffdd474bf80a592d152a61ed541b41acd3be180d2c1bd91be1fb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2020-212

Multiple cross-site scripting XSS vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the 1 @okmessage or 2 @errormessage parameter to issue...

PT-2020-7274

Name of the Vulnerable Software and Affected Versions: Roundup versions prior to 1.4.20 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the @ok message or @error message parameter to issue. This enables attackers to perform cross-site scripting XSS attack...

CVE-2012-4458: Undefined Security Weakness

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service memory consumption and server crash via a large number of zero width elements in the client-properties map in a connection.start-ok message...