Malicious code in eslint-plugin-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1032 Malicious code in eslint-config-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a0feb02dac8e9a44d4dfef753d5e64e20660b0f07333ca0660f422036d468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a520e43e8c3f5918ff525c55f9b99a1715b3b4d89e3596cc698e7954e2bc7e63 The OpenSSF Package Analysis project identified 'uber-eslint' @ 99.99.992 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1326 Malicious code in uber-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a520e43e8c3f5918ff525c55f9b99a1715b3b4d89e3596cc698e7954e2bc7e63 The OpenSSF Package Analysis project identified 'uber-eslint' @ 99.99.992 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1175 Malicious code in eslint-config-mirakl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0a25468bc92620eecf8b46085022ddaa259cf5b4ef94bb98423249eeba1e308 The OpenSSF Package Analysis project identified 'eslint-config-mirakl' @ 22.5.15 npm as malicious. It is considered malicious because: - The...

Malicious code in eslint-config-mirakl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0a25468bc92620eecf8b46085022ddaa259cf5b4ef94bb98423249eeba1e308 The OpenSSF Package Analysis project identified 'eslint-config-mirakl' @ 22.5.15 npm as malicious. It is considered malicious because: - The...

Malicious code in eslint-plugin-artsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-312 Malicious code in eslint-plugin-artsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-5 Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Cross-site Scripting (XSS)

eslint-detailed-reporter is vulnerable to Cross-site Scripting XSS. The vulnerability exists in renderIssue function in template-generator.js because the issue message is not properly escaped when rendering issues which allows an attacker to inject and execute arbitrary JavaScript...

GHSA-4XR4-89M5-46C7 eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=0.0.82-beta) +5 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.8.0)

eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: OSV:GHSA-4XR4-89M5-46C7...

eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942

CVE-2022-4942 affects mportuga eslint-detailed-reporter up to version 0.9.0. The vulnerability is in renderIssue (lib/template-generator.js) where the message argument is not properly escaped, enabling cross-site scripting. Exploitation may be remote. Patch 505c190efd4905990db6207863bdcbd9b1d7e1b...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...