CVE-2024-41946 REXML DoS vulnerability

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

Malicious code in diosaziose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e55eab0b1fe3321b359ded42ffc43ae4db39f3ff2dab487f6843d966631c5f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7878 Malicious code in modernliner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf623671632e06ed7e8e26020d02280a1f33a08072118d85f4308e61cb33cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7874 Malicious code in basementio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34d07a3714013c3b80169617fbfdec7536fb083223135f6e31302f07529046e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7881 Malicious code in trigiated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b166834a8cf224895f65eb6d9b88fec709bf6d40b7d986277c00ecae0bfb6dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-41946: Uncontrolled Resource Consumption

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

REXML security vulnerabilities

REXML is a Ruby open source XML toolkit for Ruby. A security vulnerability exists in REXML versions prior to 3.3.3, which stems from a DoS vulnerability when parsing XML with many entity extensions...

DoS vulnerabilities in REXML

There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-41946. We strongly recommend upgrading the REXML gem. Details When parsing an XML that has many entity expansions with SAX2 or pull parser API, REXML gem may take long time. Please update...

MAL-2024-7864 Malicious code in @illimity/rtl-faqs-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7862 Malicious code in @illimity/core-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfbbb8816aecc7d7379b8f283d3911cf8ff743ba65146e93f03c4f001e421635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7861 Malicious code in @illimity/core-banking-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4a29525c951e93fc197dc9c57e657855c0bac65e57ddcf12f6fb12c20dc281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7868 Malicious code in wix-smarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7866 Malicious code in some-dependency-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9892935af84d9c4a9ba16e155760875b390cbc18f318be83280fcb53a3278904 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-3930

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity XXE was discovered...

CVE-2024-3930

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity XXE was discovered...

CVE-2024-3930 XML External Entity in Akana

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity XXE was discovered...

CVE-2024-3930 XML External Entity in Akana

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity XXE was discovered...

CVE-2024-3930

CVE-2024-3930 is an XML External Entity (XXE) vulnerability in Akana API Platform prior to 2024.1.0. The NVD entry cites CVSS v3.1: Base score 9.8 (CRITICAL) with network attack vector, no privileges or user interaction required, and impacts to confidentiality, integrity, and availability. Other ...

PT-2024-28425

Name of the Vulnerable Software and Affected Versions Akana API Platform versions prior to 2024.1.0 Description A flaw resulting in XML External Entity XXE was discovered. XXE is a type of attack where an application parses XML input containing a reference to an external entity, allowing an...

Akana API Platform code-related vulnerabilities

Akana API Platform is one of Akana's easiest ways to accelerate digital transformation in your organization. A code issue vulnerability exists in Akana API Platform versions prior to 2024.1.0 that stems from the presence of XML External Entity XXE injection...