Malicious code in get-deps-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fa6f34a831aa832f9d88019ce3d0f4011701df6ab0667bd263645208c978ce On require, get-deps-path immediately invokes getPlugin, which performs an HTTP fetch to https://jsonkeeper.com/b/QBRMI an anonymous public paste hos...

Malicious code in to-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb3d12c0df356fc34c0b79a003f32a6484dd9229b43dfef5b89c8dd4dec51c package.json declares postinstall: node index.js. On npm install, index.js unconditionally HTTPS-GETs https://meet-fr.com/ChromeSetup.exe, writes it ...

CVE-2020-37218 Joomla com_hdwplayer 4.2 SQL Injection via search.php

Joomla comhdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the...

com.51degrees:geo-location.web.examples.mvc (>=4.4.18, <=4.4.19), com.51degrees:geo-location.web.examples.servlet (>=4.4.18, <=4.4.19) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.18, =4.4.18, =4.4.18,...

com.51degrees:geo-location.web.examples.mvc (>=4.4.18, <=4.4.19), com.51degrees:geo-location.web.examples.servlet (>=4.4.18, <=4.4.19) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.18, =4.4.18, =4.4.18,...

ch.sbb.releasetrain:jsfbootadapter (>=0.0.25, <=0.9.6), ch.sbb.releasetrain:webui (0.0.25) +183 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.36)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.sbb.releasetrain:jsfbootadapter =0.0.25, =0.9.6 - ch.sbb.releasetrain:web...

com.51degrees:geo-location.web.examples.mvc (>=4.4.11, <=4.4.12), com.51degrees:geo-location.web.examples.servlet (>=4.4.11, <=4.4.12) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.89)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.89 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.11, =4.4.11, =4.4.11, =4.4....

com.51degrees:geo-location.web.examples.mvc (>=4.4.18, <=4.4.19), com.51degrees:geo-location.web.examples.servlet (>=4.4.18, <=4.4.19) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.18, =4.4.18, =4.4.18,...

com.51degrees:geo-location.web.examples.mvc (>=4.4.14, <=4.4.16), com.51degrees:geo-location.web.examples.servlet (>=4.4.14, <=4.4.16) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.91)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.14, =4.4.14, =4.4.14, =4.4....

com.51degrees:geo-location.web.examples.mvc (4.4.17), com.51degrees:geo-location.web.examples.servlet (4.4.17) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.92)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.92 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.17 -...

com.51degrees:geo-location.web.examples.mvc (>=4.4.29, <=4.4.30), com.51degrees:geo-location.web.examples.servlet (>=4.4.29, <=4.4.30) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.29, =4.4.29, =4.4.29,...

com.51degrees:device-detection (>=4.3.11, <=4.3.13), com.51degrees:device-detection.cloud (>=4.3.11, <=4.3.13) +17 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.48)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.48 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:device-detection =4.3.11, =4.3.11, =4.3.11, =4.3.11, =4.3.11,...

com.51degrees:geo-location.web.examples.mvc (>=4.4.11, <=4.4.12), com.51degrees:geo-location.web.examples.servlet (>=4.4.11, <=4.4.12) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.89)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.89 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.11, =4.4.11, =4.4.11, =4.4....

com.51degrees:geo-location.web.examples.mvc (>=4.4.14, <=4.4.16), com.51degrees:geo-location.web.examples.servlet (>=4.4.14, <=4.4.16) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.91)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.14, =4.4.14, =4.4.14, =4.4....

com.51degrees:geo-location.web.examples.mvc (>=4.4.26, <=4.4.28), com.51degrees:geo-location.web.examples.servlet (>=4.4.26, <=4.4.28) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.98)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.26, =4.4.26, =4.4.26,...

com.51degrees:geo-location.web.examples.mvc (4.4.13), com.51degrees:geo-location.web.examples.servlet (4.4.13) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.90)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.13 -...

com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.4.10), com.51degrees:geo-location.web.examples.servlet (>=4.3.10, <=4.4.10) +39 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.73)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.73 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.3.10, =4.3.10, =4.3.10,...

com.51degrees:geo-location.web.examples.mvc (4.4.20), com.51degrees:geo-location.web.examples.servlet (4.4.20) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.95)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.20 -...

com.51degrees:geo-location.web.examples.mvc (4.4.25), com.51degrees:geo-location.web.examples.servlet (4.4.25) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.97)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.97 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.25 -...

com.51degrees:geo-location.web.examples.mvc (4.4.25), com.51degrees:geo-location.web.examples.servlet (4.4.25) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.97)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.97 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.25 -...