MAL-2025-29082 Malicious code in perturbation-altair-sedna-eridanus (npm)

The package perturbation-altair-sedna-eridanus was found to contain malicious code...

MAL-2025-14405 Malicious code in altair-prettier-node-config-prosthetics (npm)

The package altair-prettier-node-config-prosthetics was found to contain malicious code...

MAL-2025-32720 Malicious code in saturnology-meissa-apollo-altair (npm)

The package saturnology-meissa-apollo-altair was found to contain malicious code...

MAL-2025-39581 Malicious code in xanthus-gridsome-altair-dione (npm)

The package xanthus-gridsome-altair-dione was found to contain malicious code...

MAL-2025-18726 Malicious code in draco-altair-sirius-jest (npm)

The package draco-altair-sirius-jest was found to contain malicious code...

MAL-2025-25777 Malicious code in magnetosphere-process-dendrochronology-altair (npm)

The package magnetosphere-process-dendrochronology-altair was found to contain malicious code...

MAL-2025-27746 Malicious code in nova-altair-phenomic-gemini (npm)

The package nova-altair-phenomic-gemini was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

MAL-2025-21122 Malicious code in galaxy-altair-babel-link (npm)

The package galaxy-altair-babel-link was found to contain malicious code...

MAL-2025-14407 Malicious code in altair-publish-semantic-ui-prompts (npm)

The package altair-publish-semantic-ui-prompts was found to contain malicious code...

MAL-2025-33641 Malicious code in solis-sagitta-bootstrap-altair (npm)

The package solis-sagitta-bootstrap-altair was found to contain malicious code...

MAL-2025-37671 Malicious code in umbra-xenos-altair-xenos (npm)

The package umbra-xenos-altair-xenos was found to contain malicious code...

MAL-2025-24889 Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)

The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code...

CVE-2024-54147

Altair is a GraphQL client for all platforms. Prior to version 8.0.5, Altair GraphQL Client's desktop app does not validate HTTPS certificates allowing a man-in-the-middle to intercept all requests. Any Altair users on untrusted networks eg. public wifi, malicious DNS servers may have all GraphQL...

CVE-2023-43799

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...

CVE-2019-15719

Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbsmom, which fails to properly authenticate the message. This results in code execution as an arbitrary user...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through = 5.2.2...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair allows Object Injection.This issue affects Altair: from n/a through 5.2.2...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through = 5.2.2...

CVE-2025-32928 WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair allows Object Injection.This issue affects Altair: from n/a through 5.2.2...