EUVD-2026-67868

plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...

EUVD-2025-200049

Malicious code in nnc-web npm...

EUVD-2025-133847

Malicious code in lookingan-nanakila81 npm...

EUVD-2025-146583

Malicious code in uyifa-tut-da npm...

EUVD-2025-117014

Malicious code in uniform-emerald-dove npm...

EUVD-2025-101390

Malicious code in udin-tapai87-riris npm...

EUVD-2025-82738

Malicious code in bayu-buburayam41-ruro npm...

EUVD-2025-56233

Malicious code in zain-dradag95-sluey npm...

EUVD-2025-46972

Malicious code in joko-empal37-sukiwir npm...