diffplug__goomph_CVE-2022-26049_3-37-1

Goomph: IDE as build artifact Also plugins for working with SWT, OSGi, p2, and Eclipse RCP IDE-as-build-artifact. It is possible to have many installations of the Eclipse IDE share a common set of installed artifacts, called a "bundlepool". This means it is fast and efficient to get a purpose-bui...

anjiayi-elf (>=1.0.0, <=1.0.9), anjiayi-exp (>=1.0.0, <=1.2.6) +5 more potentially affected by unknown CVE via lutils-merge (>=0.1.4, <=0.2.6)

lutils-merge NPM version =0.1.4, =1.0.0, =1.0.0, =1.0.0, =0.0.1-alpha, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0127...

MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Plugin Build Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

com.axonivy.ivy.ci:project-build-plugin (>=0.0.4, <=7.3.0) potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (1.2.3)

net.lingala.zip4j:zip4j MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - com.axonivy.ivy.ci:project-build-plugin =0.0.4, =7.3.0 Source cves: CVE-2023-22899 Source advisory:...

com.axonivy.ivy.ci:project-build-plugin (>=0.0.4, <=7.3.0) potentially affected by CVE-2022-24615 via net.lingala.zip4j:zip4j (1.2.3)

net.lingala.zip4j:zip4j MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - com.axonivy.ivy.ci:project-build-plugin =0.0.4, =7.3.0 Source cves: CVE-2022-24615 Source advisory:...

CloudBees Jenkins Mac Plugin Data Falsification Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . Mac Plugin is used in one of...

anjiayi-elf (>=1.0.0, <=1.0.9), anjiayi-exp (>=1.0.0, <=1.2.6) +5 more potentially affected by unknown CVE via lutils-merge (>=0.1.4, <=0.2.6)

lutils-merge NPM version =0.1.4, =1.0.0, =1.0.0, =1.0.0, =0.0.1-alpha, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: GHSA-F7QW-5PVG-MMWP...