9248 matches found
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
EUVD-2025-115088
Malicious code in config-foundation-equinox-betelgeuse npm...
EUVD-2025-122933
Malicious code in quito-bellatrix-polaris-foundation npm...
Malicious code in yaml-foundation-antares-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in castor-nashira-grunt-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quark-foundation-astro-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113524
Malicious code in fork-foundation-enceladus-avior npm...
EUVD-2025-121088
Malicious code in typeorm-comet-carpo-foundation npm...
Malicious code in postcss-loader-style-loader-foundation-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7af3a5be712e0cae8587eeca54d8551aab41011790b2cadb628fd9c4e66952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113438
Malicious code in foundation-taurus-perseus-quark npm...
EUVD-2025-112047
Malicious code in jupiter-wasat-blitz-foundation npm...
EUVD-2025-124471
Malicious code in nightmare-superagent-foundation-dynamo npm...
EUVD-2025-113442
Malicious code in foundation-nodemon-capella-jupiter npm...
EUVD-2025-120226
Malicious code in xerxes-foundation-postcss-loader-aquarius npm...
EUVD-2025-115335
Malicious code in chromedriver-foundation-ophiuchus-meteor npm...
Malicious code in xenon-ariel-foundation-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111337
Malicious code in mdx-schema-chai-foundation npm...