MAL-2024-8899 Malicious code in acronym-decoder-chrome-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a3a001eb751394dba7b7d59d8580152ab849a2d8971aecc8c65f800c4276008 The OpenSSF Package Analysis project identified 'acronym-decoder-chrome-angular' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8897 Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +98 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: MEND:CVE-2024-45812...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +43 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 -...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +98 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +43 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 -...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +43 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 -...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +98 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: GHSA-64VR-G452-QVP3...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +98 more potentially affected by CVE-2024-45811 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45811 Source advisory: GHSA-9CWX-2883-4WFX...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +98 more potentially affected by CVE-2024-45811 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +43 more potentially affected by CVE-2024-45811 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 -...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45811 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45811 Source advisory:...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45811 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45811 Source advisory:...

Content Spoofing

angular is vulnerable to Content Spoofing. The vulnerability is caused due to improper sanitization of the value of the srcset attribute in HTML elements. This allows attackers to bypass common image source restrictions, which can lead to a form of Content Spoofing...

Content Spoofing

angular is vulnerable to Content Spoofing. The vulnerability is caused by improper sanitization of the value of the srcset attribute. This allows attackers to bypass common image source restrictions, leading to a form of Content Spoofing...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3255 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: GHSA-M9GF-397R-HWPG...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3255 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: OSV:GHSA-M9GF-397R-HWPG...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3298 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8373 Source advisory: OSV:GHSA-MQM9-C95H-X2P6...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3298 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8373 Source advisory: GHSA-MQM9-C95H-X2P6...