MAL-2025-3311 Malicious code in @sporta-technology/d11-web-components.button (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.button (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.bit-theme-wrapper (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3309 Malicious code in @sporta-technology/d11-web-components.bit-theme-wrapper (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3308 Malicious code in @sporta-technology/d11-web-components.banner (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.banner (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3307 Malicious code in @sporta-technology/d11-web-components.avatar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3306 Malicious code in @sporta-technology/d11-web-components.accordion (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.accordion (npm)

--- -= Per source details. Do not edit below this line.=-...

Important: Red Hat Security Advisory: virtuoso-opensource security update

An update for virtuoso-opensource is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2024-42699 via org.opencms:opencms-core (9.5.0)

org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...

org.opencms:opencms-components (9.0.1), org.opencms:opencms-gwt (9.0.1) +19 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.0.1)

org.opencms:opencms-core MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.0.1 - org.opencms:opencms-gwt 9.0.1 - org.opencms:opencms-setup 9.0.1 -...

org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.5.3)

org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...

org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2024-41447 via org.opencms:opencms-core (9.5.3)

org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...

SQL Injection

flowise-components is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the tableName parameter in PostgresVectorStore, which allows an attacker to execute arbitrary SQL commands...

CVE-2025-27599: Improper Export of Android Application Components

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

MAL-2025-3214 Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @csds-web-components/csds-container

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @csds-web-components/csds-iconset

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @csds-web-components/csds-icon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...