20573 matches found
CVE-2025-51691
Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...
GIMP Heap Buffer Overflow DoS
The vulnerability of the GIMP graphic editor is related to the execution of operations beyond the buffer boundaries in memory when processing TGA format files. Exploiting this vulnerability can allow an attacker to cause a system failure...
MAL-2025-26629 Malicious code in monaco-editor-loader (npm)
The package monaco-editor-loader was found to contain malicious code...
MAL-2025-32555 Malicious code in rule-editor (npm)
The package rule-editor was found to contain malicious code...
Malicious code in ory-editor-renderer-hubside (npm)
The package ory-editor-renderer-hubside was found to contain malicious code...
Malicious code in webtask-sequence-editor (npm)
The package webtask-sequence-editor was found to contain malicious code...
com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)
com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...
MAL-2025-25958 Malicious code in markup-web-editor (npm)
The package markup-web-editor was found to contain malicious code...
MAL-2025-19522 Malicious code in elevio-editor (npm)
The package elevio-editor was found to contain malicious code...
Malicious code in markup-web-editor (npm)
The package markup-web-editor was found to contain malicious code...
MAL-2025-36839 Malicious code in three-editor-release (npm)
The package three-editor-release was found to contain malicious code...
MAL-2025-28502 Malicious code in ory-editor-core-hubside (npm)
The package ory-editor-core-hubside was found to contain malicious code...
MAL-2025-28503 Malicious code in ory-editor-renderer-hubside (npm)
The package ory-editor-renderer-hubside was found to contain malicious code...
Malicious code in monaco-editor-loader (npm)
The package monaco-editor-loader was found to contain malicious code...
Malicious code in understory-editor (npm)
The package understory-editor was found to contain malicious code...
delegate-dom (>=0.0.0, <=0.0.1), dom-delegation-stream (0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (0.0.0)
matches-dom-selector NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...
MAL-2025-37721 Malicious code in understory-editor (npm)
The package understory-editor was found to contain malicious code...
Malicious code in ymail-editor (npm)
The package ymail-editor was found to contain malicious code...