CLSA-2026-1792163513 TuxCare security update for bower (1 CVE)

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.7-tuxcare.1...

CLSA-2026-1792115181 TuxCare security update for bower (1 CVE)

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.14-tuxcare.2...

PT-2026-123222

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.14-tuxcare.2...

PT-2026-124721

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.7-tuxcare.1...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in "lib/decompress-zip.js" improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

PT-2026-108062

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

Malicious code in drupal-bower-install (npm)

The package drupal-bower-install was found to contain malicious code. --- Credit: OpenSSF source...

bower-cache (0.5.0), cactus (>=3.1.0, <=3.3.3) +22 more potentially affected by CVE-2026-15830 via django (1.6.11)

django PYPI version 1.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - bower-cache 0.5.0 - cactus =3.1.0, =0.3.2, =0.11.0, =0.1.1, =0.1.1, =0.1.0, =0.2.0, =0.2.1, =0.2.3 - django-pesapal 0.2.1 and more Source cves:...

CLSA-2026-1782176268 TuxCare security update for bower (1 CVE)

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.4-tuxcare.1...

PT-2026-75149

TuxCare rebuilt bower to address 1 CVE. Fixed in 1.8.4-tuxcare.1...

bower.json File Disclosure Detection

Bower is a package manager which stores package information in the bower.json file !/usr/bin/env python3 -- coding: utf-8 -- """Bower is a package manager which stores package information in the bower.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Malicious Package

Overview google-caja-bower is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in google-caja-bower

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...