Malicious code in query-kuiperbelt-blitz-eslint-plugin (npm)

The package query-kuiperbelt-blitz-eslint-plugin was found to contain malicious code...

Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)

The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...

MAL-2025-36704 Malicious code in test-yakutsk-blitz-eleventy (npm)

The package test-yakutsk-blitz-eleventy was found to contain malicious code...

MAL-2025-18456 Malicious code in dione-blitz-indus-auth0 (npm)

The package dione-blitz-indus-auth0 was found to contain malicious code...

MAL-2025-36794 Malicious code in thermochronology-borealis-blitz-areology (npm)

The package thermochronology-borealis-blitz-areology was found to contain malicious code...

MAL-2025-15820 Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)

The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...

MAL-2025-17384 Malicious code in comet-draco-parallax-blitz (npm)

The package comet-draco-parallax-blitz was found to contain malicious code...

MAL-2025-17290 Malicious code in colors-blitz-quasar-australis (npm)

The package colors-blitz-quasar-australis was found to contain malicious code...

MAL-2025-32608 Malicious code in sadr-blitz-capella-grus (npm)

The package sadr-blitz-capella-grus was found to contain malicious code...

MAL-2025-23302 Malicious code in io-nextjs-loopback-blitz (npm)

The package io-nextjs-loopback-blitz was found to contain malicious code...

The vulnerability of the Blitz Identity Provider software lies in its insufficient limit on authentication attempts. This allows a perpetrator to register an email account to which they have no access and then verify it.

The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to register a mail account that they do not have access to and then verify it...

PT-2025-31116 · 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связанна с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, зарегистрировать учетную запись с почтой, к которой не имеет доступа и подтвердить ее...

The vulnerability of the Blitz Identity Provider software, related to deficiencies in the authentication process, allows a perpetrator to change the email address of a user’s account.

The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to change the email address of a user’s account remotely...

The vulnerability of the Blitz Identity Provider software lies in its insufficient limitation on the number of authentication attempts. This allows a hacker to associate any arbitrary email address with a user account.

The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to associate any email address with a user account...

The vulnerability of the Blitz Identity Provider software, related to incorrect configuration of access rights, allows a hacker to send an email with arbitrary text to the user’s assigned email address.

The vulnerability of the Blitz Identity Provider software is related to incorrect configuration of access rights. Exploiting this vulnerability could allow a malicious actor to send an email with arbitrary text to the user’s associated account...

The vulnerability of the Blitz Identity Provider software, related to deficiencies in authentication mechanisms, allows attackers to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

PT-2024-41443 · Ооо 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связана с некорректной настройкой правд доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, отправить на привязанную к аккаунту пользователя электронную почту письмо с произвольным текстом...

PT-2024-41442 · Ооо 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связана с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, привязать произвольную электронную почту к учетной записи пользователя...

The vulnerability of the Blitz Identity Provider software lies in its ability to redirect URL addresses, allowing a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the Blitz Identity Provider software relates to the possibility of redirecting URL addresses. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address by sending a specially crafted link...

@blitzjs/codemod (>=0.0.0-a78bd33-20230114151431 <=0.0.0-turbopack-20240403083540), @theapexlab/ra-data-blitz (=0.0.1) +1 more potentially affected by CVE-2022-23631 via blitz (>=0.0.0-a78bd33-20230114151431 <=0.43.0)

blitz NPM version =0.0.0-a78bd33-20230114151431, =0.0.0-a78bd33-20230114151431, =0.1.0, =0.1.5 Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...