10 matches found
django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-78677 via gitpython (1.0.1)
gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...
django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-69097 via gitpython (1.0.1)
gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...
CodeKit Configuration Exposure Detection
Detected exposed CodeKit configuration files that may have revealed sensitive project information, including file paths, build settings, hooks, and project structure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed CodeKit configuration files that may have revealed sensitive project...
jmatt-sqre-codekit (2.1.0), pyupdater (>=1.0.1, <=1.1.13) +2 more potentially affected by CVE-2025-50181 via urllib3 (1.12.0)
urllib3 PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - jmatt-sqre-codekit 2.1.0 - pyupdater =1.0.1, =2.0.0, =0.1.5, =0.1.18 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...
jmatt-sqre-codekit (2.1.0), pyupdater (>=1.0.1, <=1.1.13) +2 more potentially affected by CVE-2025-50181 via urllib3 (1.12.0)
urllib3 PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - jmatt-sqre-codekit 2.1.0 - pyupdater =1.0.1, =2.0.0, =0.1.5, =0.1.18 Source cves: CVE-2025-50181 Source advisory: OSV:GHSA-PQ67-6M6Q-MJ2V...
WordPress CodeKit – Custom Codes Editor Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)
Software CodeKit – Custom Codes Editor Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fe5c4dee3953 Credits Rafie Muhammad...
Malicious code in att-codekit (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 004ba0a87bf93fad7e23fc134ea62c1fad90d2917fff3ad6ca64a87adf16f69d The OpenSSF Package Analysis project identified 'att-codekit' @ 5.1.0 rubygems as malicious. It is considered malicious because: - The package...
MAL-2023-1423 Malicious code in att-codekit (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 004ba0a87bf93fad7e23fc134ea62c1fad90d2917fff3ad6ca64a87adf16f69d The OpenSSF Package Analysis project identified 'att-codekit' @ 5.1.0 rubygems as malicious. It is considered malicious because: - The package...
WordPress CodeKit – Custom Codes Editor plugin <= 2.2.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress CodeKit – Custom Codes Editor plugin versions = 2.2.9. Solution Update the WordPress CodeKit – Custom Codes Editor plugin to the latest available version at least 2.3...
WordPress CodeKit – Custom Codes Editor plugin <= 2.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress CodeKit – Custom Codes Editor plugin versions = 2.2.9. Solution Update the WordPress CodeKit – Custom Codes Editor plugin to the latest available version at least 2.3...