1732 matches found
EUVD-2025-113801
Malicious code in event-deimos-mini-css-extract-plugin-mira npm...
EUVD-2025-122696
Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint npm...
EUVD-2025-121920
Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown npm...
EUVD-2025-111127
Malicious code in mini-css-extract-plugin-postcss-hapi-protractor npm...
EUVD-2025-111125
Malicious code in mini-css-extract-plugin-proxima-forever-altair npm...
EUVD-2025-115015
Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf npm...
EUVD-2025-111142
Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer npm...
EUVD-2025-112607
Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin npm...
EUVD-2025-116846
Malicious code in airbnb-janus-uninstall-mini-css-extract-plugin npm...
EUVD-2025-113208
Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar npm...
MAL-2025-142595 Malicious code in fork-publish-node-config-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f6e9a7562a333d4e73524c50d96a1a156c6d0d860a6af6a4cad3f0ea51e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113206
Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies npm...
EUVD-2025-111833
Malicious code in leda-mini-css-extract-plugin-backend-radiant npm...
EUVD-2025-111130
Malicious code in mini-css-extract-plugin-orbit-meissa-cluster npm...
MAL-2025-147721 Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2186526dff27c6c4fa856cfe4c9936a3d13ab0f924c3f55f611a9ca589374cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
ROS-20251106-04
Vulnerability of django.utils.archive.extract function of Django web application software platform is related to errors in the relative directory path handling mechanism. Exploitation of the vulnerability could allow a remote attacker to bypass security restrictions. Vulnerability in...
OPENSUSE-SU-2025:20022-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate, alias, aggregate, and extra on MySQL and MariaDB boo1250485 - CVE-2025-59682: Fixed a potential partial directory-traversal via archive.extract boo1250487...
UBUNTU-CVE-2025-12060
The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...
CVE-2025-12060 Keras keras.utils.get_file Utility Path Traversal Vulnerability
The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...
