CVE-2026-34969: Exposure of Sensitive Information to an Unauthorized Actor

Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers,...

dataset-image-annotator (0.0.19), fastapi-auth-service (>=0.0.3, <=0.0.7) potentially affected by CVE-2025-68481 via fastapi-users (10.2.1)

fastapi-users PYPI version 10.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - dataset-image-annotator 0.0.19 - fastapi-auth-service =0.0.3, =0.0.7 Source cves: CVE-2025-68481 Source advisory:...

EUVD-2020-3213

Malware in sbrugna...

EUVD-2024-31254

Malicious code in bioql PyPI...

CLSA-2025-1758896552 dovecot: Fix of CVE-2020-12674

CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...

CLSA-2025-1758820840 dovecot: Fix of CVE-2020-12674

CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...

MAL-2025-26289 Malicious code in mi-angular-vmp-auth-service (npm)

The package mi-angular-vmp-auth-service was found to contain malicious code...

Malicious code in @frozen-team-qa/auth-service (npm)

The package @frozen-team-qa/auth-service was found to contain malicious code...

MAL-2025-7947 Malicious code in @frozen-team-qa/auth-service (npm)

The package @frozen-team-qa/auth-service was found to contain malicious code...

Malicious code in mi-angular-vmp-auth-service (npm)

The package mi-angular-vmp-auth-service was found to contain malicious code...

Malicious Package

Overview ipp-auth-service-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malware in ipp-auth-service-tools

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ipp-auth-service-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b42b5695779161ac5d3618b146cd263b9f17a9c1fe517abd5efff7b3ecdc97 Any computer that has this package installed or running should be considered...

MAL-2025-6099 Malicious code in ipp-auth-service-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b42b5695779161ac5d3618b146cd263b9f17a9c1fe517abd5efff7b3ecdc97 Any computer that has this package installed or running should be considered...

CVE-2024-33516

An unauthenticated Denial of Service DoS vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller...

CVE-2024-33516

An unauthenticated Denial of Service DoS vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller...

CVE-2024-33516

ArubaOS (Aruba Mobility Controllers) is affected by CVE-2024-33516 where an unauthenticated DoS via the PAPI protocol (UDP port 8211) can interrupt the controller’s operation. Public details indicate ArubaOS 8.10.x, 8.11.x, 10.4.x, and 10.5.x are affected; fixes are available in Aruba PSA-2024-00...

CVE-2024-33516: Stack-based Buffer Overflow

An unauthenticated Denial of Service DoS vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.genauth:genauth-java-sdk (3.1.11) +2563 more potentially affected by CVE-2023-51075 via cn.hutool:hutool-core (>=5.0.0, <=5.8.23)

cn.hutool:hutool-core MAVEN version =5.0.0, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.2, =1.0.4 and more Source cves: CVE-2023-51075 Source advisory: OSV:GHSA-7M7H-RGVP-3V4R...

PT-2023-29939 · Extreme Networks · Iq Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks IQ Engine versions prior to 10.6r1a Extreme Networks IQ Engine versions 10.6r1a through 10.6r4 before 10.6r5 Description: The issue is related to a Buffer Overflow vulnerability in the implementation of the ah auth service,...