EUVD-2009-1207

Malware in sbrugna...

EUVD-2007-2681

Malware in sbrugna...

EUVD-2009-2930

Malware in sbrugna...

EUVD-2008-0426

Malware in sbrugna...

EUVD-2011-1937

Malware in sbrugna...

EUVD-2020-6543

Malware in sbrugna...

EUVD-2018-0691

Malware in sbrugna...

EUVD-2007-2459

Malware in sbrugna...

EUVD-2001-1294

Malware in sbrugna...

EUVD-2008-5328

Malware in sbrugna...

EUVD-2006-2752

Malware in sbrugna...

EUVD-2020-6541

Malware in sbrugna...

EUVD-2007-2682

Malware in sbrugna...

EUVD-2007-6285

Malware in sbrugna...

EUVD-2022-5860

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview sanitize-html is a library that allows you to clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis Affected versions of this package are vulnerable to Cross-site Scripting XSS via the naughtyHref function. An attacker can execute...

CVE-2014-125128

'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...