Drupal Synchronize composer.json With Contrib Modules module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Synchronize composer.json With Contrib Modules versions...

Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

This module allows users to setup two-factor authentication 2FA using authenticator apps for enhanced login security. The module did not protect all possible login paths provided by core modules. CVSS risk score experimental 6.3 / Medium...

Malicious code in @espace-client-axafr/redux-contrib (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41886 Malicious code in @espace-client-axafr/redux-contrib (npm)

The package communicates with a domain associated with malicious activity...

https-curl (1.7.9), multi-installer (0.0.1) +3 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.1.0, <=1.15.1)

screenshot-desktop NPM version =1.1.0, =1.0.0, =1.0.0, =1.3.0, =1.3.6 Source cves: CVE-2025-55294 Source advisory: OSV:GHSA-GJX4-2C7G-FM94...

Linux Distros Unpatched Vulnerability : CVE-2023-25151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of go.opentelemetry.io/contrib/instrumentation/net/http/otelhtt...

CVE-2025-8996 Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

Malicious code in @zalastax/nolb-node-red-contrib-e (npm)

The package @zalastax/nolb-node-red-contrib-e was found to contain malicious code...

Malicious code in node-red-contrib-wotkit (npm)

The package node-red-contrib-wotkit was found to contain malicious code...

Malicious code in red-contrib-enable-gps (npm)

The package red-contrib-enable-gps was found to contain malicious code...

MAL-2025-12677 Malicious code in @zalastax/nolb-node-red-contrib-k (npm)

The package @zalastax/nolb-node-red-contrib-k was found to contain malicious code...

MAL-2025-12664 Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)

The package @zalastax/nolb-node-red-contrib-2 was found to contain malicious code...

MAL-2025-12670 Malicious code in @zalastax/nolb-node-red-contrib-d (npm)

The package @zalastax/nolb-node-red-contrib-d was found to contain malicious code...

Malicious code in node-red-contrib-ys7 (npm)

The package node-red-contrib-ys7 was found to contain malicious code...

MAL-2025-27651 Malicious code in node-red-contrib-ys7 (npm)

The package node-red-contrib-ys7 was found to contain malicious code...

MAL-2025-27641 Malicious code in node-red-contrib-flows_splitter (npm)

The package node-red-contrib-flowssplitter was found to contain malicious code...

MAL-2025-27646 Malicious code in node-red-contrib-storfly-iot-hp (npm)

The package node-red-contrib-storfly-iot-hp was found to contain malicious code...

MAL-2025-12667 Malicious code in @zalastax/nolb-node-red-contrib-a (npm)

The package @zalastax/nolb-node-red-contrib-a was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-b (npm)

The package @zalastax/nolb-node-red-contrib-b was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-i (npm)

The package @zalastax/nolb-node-red-contrib-i was found to contain malicious code...