5008 matches found
Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities.
Summary There are vulnerabilities in Open-Source Software OSS components consumed by IBM Cognos Dashboards on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2025-58754]
Summary Node.js module axios is used by IBM App Connect Enterprise Certified Container for some HTTP calls. IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Node.js module...
Security Bulletin: IBM DataPower vulnerable to a Denial of Service due to Axios (CVE-2025-58754)
Summary Axios is used in the UI of IBM DataPower and in the gateway director component. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses axios which is vulnerable to this CVE-2025-58754
Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses axios which is vulnerable to this CVE-2025-58754 Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2...
Moderate: Red Hat Security Advisory: Kiali 2.11.4 for Red Hat OpenShift Service Mesh 3.1
Kiali 2.11.4 for Red Hat OpenShift Service Mesh 3.1 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Kiali 2.11.4, for Red...
EUVD-2021-2040
Malware in sbrugna...
EUVD-2021-0488
Malware in sbrugna...
EUVD-2019-11513
Malware in sbrugna...
EUVD-2019-17225
Malware in sbrugna...
EUVD-2019-11514
Malware in sbrugna...
EUVD-2024-53865
Malicious code in bioql PyPI...
EUVD-2023-3051
Malicious code in bioql PyPI...
EUVD-2025-32113
Malicious code in bioql PyPI...
EUVD-2025-22475
Malicious code in bioql PyPI...
EUVD-2025-7731
Malicious code in bioql PyPI...
EUVD-2025-28992
Malicious code in bioql PyPI...
Malicious code in ancestry-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71501ecab204074038c46b64372fcfd400a8f1b7375edff35e29d5b6bbe7500a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47877 Malicious code in ancestry-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71501ecab204074038c46b64372fcfd400a8f1b7375edff35e29d5b6bbe7500a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ancestry-axios is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Security Bulletin: IBM App Connect Enterprise is vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios (CVE-2025-58754)
Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor and IBM App Connect Enterprise runtime are vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTT...