64 matches found
EUVD-2025-5060
Malicious code in bioql PyPI...
Malicious code in esbuild-linux-arm32 (npm)
The package esbuild-linux-arm32 was found to contain malicious code...
MAL-2025-19818 Malicious code in esbuild-linux-arm32 (npm)
The package esbuild-linux-arm32 was found to contain malicious code...
openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0145-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0145-1 advisory. - Chromium 136.0.7103.48 stable release 2025-04-29 boo1242153 CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11...
OPENSUSE-SU-2025:0145-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 136.0.7103.48 stable release 2025-04-29 boo1242153 CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11 CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09...
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: kubewatch, kubeflow-pipelines, k3s, flux-image-reflector-controller, grafana-operator, kubernetes-event-exporter, petname, capslock, wireguard-go, newrelic-prometheus-configurator, scorecard, memcached-exporter, cert-exporter, timoni, hubble-ui, dive, tailscale,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: kubewatch, kubeflow-pipelines, k3s, flux-image-reflector-controller, grafana-operator, kubernetes-event-exporter, petname, capslock, wireguard-go, newrelic-prometheus-configurator, scorecard, memcached-exporter, cert-exporter, timoni, hubble-ui, dive, tailscale,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: kubewatch, kubeflow-pipelines, k3s, flux-image-reflector-controller, grafana-operator, kubernetes-event-exporter, petname, capslock, wireguard-go, newrelic-prometheus-configurator, scorecard, memcached-exporter, cert-exporter, timoni, hubble-ui, dive, tailscale,...
128981semzub (1.0.1), 1food-menu (>=0.0.1, <=0.3.8) +25291 more potentially affected by unknown CVE via esbuild (>=0.0.0, <=0.24.2)
esbuild NPM version =0.0.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =0.1.0, =0.0.1, =0.0.4, =0.0.1, =1.0.0, =1.1.0 - 7qb-cli 2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-67MH-4WV8-2F99...
esbuild enables any website to send any requests to the development server and read the response
Summary esbuild allows any websites to send any request to the development server and read the response due to default CORS settings. Details esbuild sets Access-Control-Allow-Origin: header to all requests, including the SSE connection, which allows any websites to send any request to the...
PT-2025-6214 · Esbuild · Esbuild
Name of the Vulnerable Software and Affected Versions: esbuild affected versions not specified Description: The issue allows any website to send requests to the development server and read the response due to default CORS settings. This is because esbuild sets the Access-Control-Allow-Origin:...
MAL-2024-9597 Malicious code in esbuild-plugin-global-externals (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in esbuild-plugin-global-externals (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: kubewatch, kubeflow-pipelines, k3s, flux-image-reflector-controller, grafana-operator, kubernetes-event-exporter, petname, capslock, wireguard-go, newrelic-prometheus-configurator, scorecard, memcached-exporter, cert-exporter, timoni, hubble-ui, dive, tailscale,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: kubewatch, kubeflow-pipelines, k3s, flux-image-reflector-controller, grafana-operator, kubernetes-event-exporter, petname, capslock, wireguard-go, newrelic-prometheus-configurator, scorecard, memcached-exporter, cert-exporter, timoni, hubble-ui, dive, tailscale,...
GHSA-25MX-2MXM-6343 @keystone-6/core's NODE_ENV defaults to development with esbuild
Impact @keystone-6/[email protected] || 3.0.1 users that use NODEENV in their own code not dependencies to trigger security-sensitive functionality in a production build are vulnerable to NODEENV being inlined to "development" for user code. If your dependencies use NODEENV to trigger particular...
@keystone-6/core's NODE_ENV defaults to development with esbuild
Impact @keystone-6/[email protected] || 3.0.1 users that use NODEENV in their own code not dependencies to trigger security-sensitive functionality in a production build are vulnerable to NODEENV being inlined to "development" for user code. If your dependencies use NODEENV to trigger particular...
CVE-2022-39382 NODE_ENV in Keystone defaults to development with esbuild
Keystone is a headless CMS for Node.js — built with GraphQL and React.@keystone-6/[email protected] || 3.0.1 users that use NODEENV to trigger security-sensitive functionality in their production builds are vulnerable to NODEENV being inlined to "development" for user code, irrespective of what your...
Fedora: Security Advisory for golang-github-evanw-esbuild (FEDORA-2022-ea8f4e232d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
