111 matches found
FAUST iServer 9.0.018.018.4 - Local File Inclusion
FAUST iServer before 9.0.019.019.7 is susceptible to local file inclusion because for each URL request it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal. id: CVE-2021-34805 info: name: FAUST iServer 9.0.018.018.4 - Local File Inclusio...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108378 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108378 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693577...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108379 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108379 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693578...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108383 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108383 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693579...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108384 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108384 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693580...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108380 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108380 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693582...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108385 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108385 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693583...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108377 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108377 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693584...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108375 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693585...
confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108376 via dataclasses-avroschema (>=0.25.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108376 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693575...
confluent-kafka-config (1.1.4), dc-avro (>=0.3.0, <=0.9.1) +3 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.36.3, <=0.65.7)
dataclasses-avroschema PYPI version =0.36.3, =0.3.0, =0.0.2, =0.1.15, =0.1.19 Source cves: CVE-2026-108375 Source advisory: MEND:CVE-2026-108375...
FAUST iServer 9.0.018.018.4 - Local File Inclusion Detection
FAUST iServer before 9.0.019.019.7 is susceptible to local file inclusion because for each URL request it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """FAUST iServer before 9.""" from...
Malicious Package
Overview faust-cont is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
MAL-2026-11042 Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
EUVD-2026-36721
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...
aiodeu (>=0.1.0, <=0.1.8), convo-nlu (0.1.0) +47 more potentially affected by CVE-2026-10143 via kafka-python (1.4.7)
kafka-python PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - aiodeu =0.1.0, =0.1.4, =0.2.0, =1.5.0, =0.1.0, =1.1.0, =0.1.0, =0.1.3 - faust-prometheus-monitor 0.1.4 - faust-pydantic-validate 0.0.1 a...
CVE-2021-41737
In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route3333333333333333333,2,1,2,3,1 : ;" leads to stack consumption...