Malicious code in ngpd-merceros-dynamic-forms-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63c636557949e167ac4cca437135be8c3160f70856ee5911c1817ba2c3f76a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23054: Uncontrolled Search Path Element

An issue in Plone Docker Official Image 5.2.13 5221 open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index npm...

SUSE CVE-2024-21485

Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable t...

dash (2.0.0rc3), django-dash-ddx-catalog (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-21485 via dash-html-components (2.0.0rc1)

dash-html-components PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - dash 2.0.0rc3 - django-dash-ddx-catalog =0.1.2, =0.1.3 Source cves: CVE-2024-21485 Source advisory: GHSA-547X-748V-VP...

dash (2.0.0rc3), django-dash-ddx-catalog (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-21485 via dash-html-components (2.0.0rc1)

dash-html-components PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - dash 2.0.0rc3 - django-dash-ddx-catalog =0.1.2, =0.1.3 Source cves: CVE-2024-21485 Source advisory:...

django-dash-ddx-catalog (>=0.1.0, <=0.1.1), famcy (0.0.2) potentially affected by CVE-2024-21485 via dash-html-components (1.1.4)

dash-html-components PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - django-dash-ddx-catalog =0.1.0, =0.1.1 - famcy 0.0.2 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6...

june (>=1.1.0, <=1.1.2), rarity (>=1.0.0.dev9, <=1.0.2) potentially affected by CVE-2024-21485 via dash-html-components (1.1.3)

dash-html-components PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - june =1.1.0, =1.0.0.dev9, =1.0.2 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

dash-tokamak (1.6.0), magani (2020.2.0) potentially affected by CVE-2024-21485 via dash-html-components (1.0.1)

dash-html-components PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - dash-tokamak 1.6.0 - magani 2020.2.0 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

buzzword (>=1.2.1, <=1.2.3), tshistory-editor (>=0.5.0, <=0.8.1) +1 more potentially affected by CVE-2024-21485 via dash-html-components (1.0.0)

dash-html-components PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - buzzword =1.2.1, =0.5.0, =0.6.0, =0.11.0 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

datadriver (>=0.1.0, <=0.1.3), ddui (3.0.4) potentially affected by CVE-2024-21485 via dash-html-components (0.13.5)

dash-html-components PYPI version 0.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - datadriver =0.1.0, =0.1.3 - ddui 3.0.4 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

divik (>=2.0.0b0, <=2.3.6) potentially affected by CVE-2024-21485 via dash-html-components (0.13.4)

dash-html-components PYPI version 0.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - divik =2.0.0b0, =2.3.6 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

echelon8-test (0.0.1) potentially affected by CVE-2024-21485 via dash-html-components (0.10.1)

dash-html-components PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - echelon8-test 0.0.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

shapash (>=1.0.0, <=1.7.1) potentially affected by CVE-2024-21485 via dash-html-components (1.1.1)

dash-html-components PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - shapash =1.0.0, =1.7.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

dragg (0.0.0), dragg-gym (0.0.1) +6 more potentially affected by CVE-2024-21485 via dash-html-components (1.0.3)

dash-html-components PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - dragg 0.0.0 - dragg-gym 0.0.1 - simba-uw-no-tf =1.2.9.2, =0.70.0, =0.10.0, =0.1.0, =0.11.1, =0.15.1 Source cves:...

interpret (>=0.0.2, <=0.1.13) potentially affected by CVE-2024-21485 via dash-html-components (0.14.0)

dash-html-components PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - interpret =0.0.2, =0.1.13 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

tshistory-editor (>=0.2.0, <=0.4.0), tsview (>=0.2.0, <=0.2.1) potentially affected by CVE-2024-21485 via dash-html-components (0.10.0)

dash-html-components PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-html-components and may be impacted: - tshistory-editor =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

june (>=1.1.0, <=1.1.2), rarity (>=1.0.0.dev9, <=1.0.2) potentially affected by CVE-2024-21485 via dash-core-components (1.16.0)

dash-core-components PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - june =1.1.0, =1.0.0.dev9, =1.0.2 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

simba-uw-no-tf (>=1.2.9.2, <=1.3.0), simba-uw-tf-dev (>=0.70.0, <=5.6.1) potentially affected by CVE-2024-21485 via dash-core-components (1.10.2)

dash-core-components PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - simba-uw-no-tf =1.2.9.2, =0.70.0, =5.6.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...

tshistory-editor (0.8.2), tshistory-refinery (>=0.1.0, <=0.5.0) +1 more potentially affected by CVE-2024-21485 via dash-core-components (1.10.1)

dash-core-components PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - tshistory-editor 0.8.2 - tshistory-refinery =0.1.0, =0.11.1, =0.15.1 Source cves: CVE-2024-21485 Source advisory:...

django-plotly-dash (1.3.1) potentially affected by CVE-2024-21485 via dash-core-components (1.9.0)

dash-core-components PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - django-plotly-dash 1.3.1 Source cves: CVE-2024-21485 Source advisory: OSV:GHSA-547X-748V-VP6P...