329 matches found
Azure Linux 3.0 Security Update: python-tensorboard (CVE-2024-43788)
The version of python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43788 advisory. - Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a...
CVE-2021-22540
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags...
@clidey/dory (0.35.0), @garage44/bunchy (>=2.0.0, <=2.1.12) +15 more potentially affected by CVE-2026-22028 via preact (>=10.26.5, <=10.26.9)
preact NPM version =10.26.5, =2.0.0, =1.0.5, =3.0.0, =2.0.0, =19.0.0, =19.0.0, =19.0.0, =1.1.6, =5.14.0, =0.0.105, =0.0.105, =0.0.2, =0.0.109, =0.0.110 and more Source cves: CVE-2026-22028 Source advisory: OSV:GHSA-36HM-QXXP-PG3M...
@knowbl_ai/nexus-chat (1.0.0), @wistia/wistia-player (0.4.0) +2 more potentially affected by CVE-2026-22028 via preact (>=10.28.0, <=10.28.1)
preact NPM version =10.28.0, =10.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on preact and may be impacted: - @knowblai/nexus-chat 1.0.0 - @wistia/wistia-player 0.4.0 - @wistia/wistia-player-react 0.4.0 - astro-og 0.3.1 Source cves: CVE-2026-2202...
@clidey/dory (0.35.0), @garage44/bunchy (>=2.0.0, <=2.1.12) +15 more potentially affected by CVE-2026-22028 via preact (>=10.26.5, <=10.26.9)
preact NPM version =10.26.5, =2.0.0, =1.0.5, =3.0.0, =2.0.0, =19.0.0, =19.0.0, =19.0.0, =1.1.6, =5.14.0, =0.0.105, =0.0.105, =0.0.2, =0.0.109, =0.0.110 and more Source cves: CVE-2026-22028 Source advisory: SNYK:JS-PREACT-14897824...
Security Bulletin: Multiple vulnerabilities in IBM Controller
Summary Multiple vulnerabilities were addressed in IBM Controller. Vulnerability Details CVEID:CVE-2024-4067 DESCRIPTION: The NPM package micromatch prior to 4.0.8 is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability occurs in micromatch.braces in index.js because the...
hacker-man
Hacker Man - Vulnerable Web Applications Lab A collection of...
EUVD-2020-29756
Malware in sbrugna...
EUVD-2024-3078
Malicious code in bioql PyPI...
EUVD-2024-2817
Malicious code in bioql PyPI...
EUVD-2024-2497
Malicious code in bioql PyPI...
EUVD-2024-2728
Malicious code in bioql PyPI...
EUVD-2024-53972
Malicious code in bioql PyPI...
EUVD-2024-53973
Malicious code in bioql PyPI...
EUVD-2024-2800
Malicious code in bioql PyPI...
EUVD-2025-5527
Malicious code in bioql PyPI...
EUVD-2021-9681
Malicious code in bioql PyPI...
EUVD-2025-5525
Malicious code in bioql PyPI...
EUVD-2024-37277
Malicious code in bioql PyPI...
Security Bulletin: Carbon design system packages
Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....