net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2025-3910 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +24 more potentially affected by CVE-2025-3910 via org.keycloak:keycloak-services (17.0.1)

org.keycloak:keycloak-services MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2025-3501 via org.keycloak:keycloak-services (15.1.0)

org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2025-2559 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

DRUPAL-CONTRIB-2025-025

This module can be used to render Open API Documentation using the RapiDoc library. The module provides a custom formatter for link fields. Drupal core does not sufficiently sanitize link element attributes, which can lead to a Cross Site Scripting vulnerability XSS. A separate fix for Drupal cor...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +16 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (15.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12, =1.3.12...

Malicious code in cis-photoshop-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77d4b1246934467151f8c2fc186f13f5899f16b36f1f32caa547a0908a27edf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2024-7341 via org.keycloak:keycloak-services (15.1.0)

org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

org.keycloak:keycloak-api-docs-dist (12.0.3), org.keycloak:keycloak-dependencies-server-all (12.0.3) +29 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (12.0.3)

org.keycloak:keycloak-saml-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 12.0.3 - org.keycloak:keycloak-dependencies-server-all 12.0....

org.keycloak:keycloak-api-docs-dist (17.0.1), org.keycloak:keycloak-dependencies-server-all (17.0.1) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (17.0.1)

org.keycloak:keycloak-saml-core MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 17.0.1 - org.keycloak:keycloak-dependencies-server-all 17.0....

Malware in discord-api-docs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in discord-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14532f4785bce55a885a6fd2945c9705ab690e1385adeee16c6d8d2d9420b4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9095 Malicious code in discord-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14532f4785bce55a885a6fd2945c9705ab690e1385adeee16c6d8d2d9420b4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.17, <=1.3.18), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.17, <=1.3.18) +16 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (16.1.0)

org.keycloak:keycloak-ldap-federation MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.17, =1.3.17, =1.3.17, =1.3.17...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.2), com.github.vzakharchenko:cisco-radius-plugin (1.3.2) +15 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (12.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2023-6787 via org.keycloak:keycloak-services (15.1.0)

org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17), com.charlyghislain.keycloak:keycloak-importexport (16.0.0) +30 more potentially affected by CVE-2023-6717 via org.keycloak:keycloak-services (16.1.0)

org.keycloak:keycloak-services MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.c4-soft.springaddons:keycloak-grants-mapper =3.1.13-jdk1.8, =1.3.17, =1.3.17, =1.3.17, =1.3.17...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +22 more potentially affected by CVE-2023-3597 via org.keycloak:keycloak-services (15.0.0)

org.keycloak:keycloak-services MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

CVE-2024-27602: Improper Access Control

Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module...