28 matches found
bloomtechlib (0.0.1), cocktail-apikit (>=0.1.20, <=0.1.22) +30 more potentially affected by CVE-2026-96749 via pymongo (3.11.4)
pymongo PYPI version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bloomtechlib 0.0.1 - cocktail-apikit =0.1.20, =0.1.8, =0.0.3, =1.0.0, =0.1.3, =0.1.0, =0.2.1, =1.0.1, =0.11.0, =0.0.23, =1.0.1, =1.0.0, =1.2.5 an...
bloomtechlib (0.0.1), cocktail-apikit (>=0.1.20, <=0.1.22) +30 more potentially affected by CVE-2024-5629 via pymongo (3.11.4)
pymongo PYPI version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bloomtechlib 0.0.1 - cocktail-apikit =0.1.20, =0.1.8, =0.0.3, =1.0.0, =0.1.3, =0.1.0, =0.2.1, =1.0.1, =0.11.0, =0.0.23, =1.0.1, =1.0.0, =1.2.5 an...
EUVD-2022-4638
Malicious code in bioql PyPI...
EUVD-2022-4346
Malicious code in bioql PyPI...
Malicious code in mi-angular-videomanager-pro-apikit (npm)
The package mi-angular-videomanager-pro-apikit was found to contain malicious code...
MAL-2025-26288 Malicious code in mi-angular-videomanager-pro-apikit (npm)
The package mi-angular-videomanager-pro-apikit was found to contain malicious code...
CVE-2020-10991
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
APIkit HTTP Connector OAuth2 Provider Unauthorized Access
The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of Mule Runtime Mule are related to errors in processing the relative path to the restricted directory. Exploiting these vulnerabilities can allow an attacker to...
Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit
Withdrawn Advisory This advisory has been withdrawn because it does not affected a package in a supported ecosystem. This link has been maintained to preserve external references. Original Description Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
GHSA-JFFQ-528J-MP6C Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit
Withdrawn Advisory This advisory has been withdrawn because it does not affected a package in a supported ecosystem. This link has been maintained to preserve external references. Original Description Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
GHSA-MWH9-GR45-XVV4 Mule modules contain Directory Traversal
Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...
Mule modules contain Directory Traversal
Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...
CVE-2020-10991
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
CVE-2020-10991
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
Input validation
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
Mulesoft APIkit Code Issue Vulnerability
MuleSoft APIkit is a tool for building REST APIs using the MULE runtime from MuleSoft USA. A code issue vulnerability exists in Mulesoft APIkit version 1.3.0 and earlier. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product...
CVE-2020-10991
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...
CVE-2020-10991
CVE-2020-10991 affects MuleSoft APIkit up to version 1.3.0. The vulnerability is an XML External Entity (XXE) issue caused by validation logic in RestXmlSchemaValidator.java, enabling external entity processing during XML parsing. Impact is described as high (per CVSS v3.1: 9.8, Network attack ve...
