com.erudika:para-server (1.22.0), org.id4me:aim-api-wrapper (>=1.0, <=2.0) +7 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.33)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.33 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server 1.22.0 - org.id4me:aim-api-wrapper =1.0, =1.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc...

CVE-2023-34540

Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...

GHSA-FJRV-VX9M-4JPJ Veracode Scan Jenkins Plugin vulnerable to information disclosure

Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to discover Veracode API credentials by listing the process and its arguments...

Code injection

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to...

CVE-2023-25722: Exposure of Sensitive Information to an Unauthorized Actor

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to...

CVE-2023-25722

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users with OS-level access of the Jenkins remote to...

MAL-2022-668 Malicious code in @trimoz/trimoz-api-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9110e2c38a1f92ba467767f3e718d50db805ec76c4de80cbdbbf6e79e28555c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-36024

CVE-2022-36024 affects py-cord, a Python Discord API wrapper used by bots. In version 2.0.0, bots added to a server with the application.commands scope without the bot scope are vulnerable to remote shutdown. The issue appears to affect public bots using slash commands. Remediation: upgrade to ve...

CVE-2022-36024 Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution

py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...

Design/Logic Flaw

DisCatSharp is a Discord API wrapper for .NET. Users of versions 9.8.5, 9.8.6, 9.9.0 and previously published prereleases of 10.0.0 who have used either one of the two RequireDisCatSharpDeveloperAttributes or the BaseDiscordClient.LibraryDeveloperTeam have potentially had their bot token sent to ...