MAL-2022-618 Malicious code in @superbet-group/testsandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3c841d01eabde154bcbc04ef8e906e2a21f4ca241cae38408ca9748e5087c01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-59 Malicious code in @adam_baldwin/sample_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 157fb357cdb3276c31d81267de4c1bb20d9e43865b3e5000e37953ed1a58cad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-94 Malicious code in @azure-test2/test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2768ecb9a8286366492bf441b8138e8288dcaa230ad23edc23ae4d1da9769413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7086 Malicious code in web3-util-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a079ce568f965c6fa2d0c2fa555d7c1956d79fa87d4e252ca54afaa5e677d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-C75V-2VQ8-878F vulnerabilities

Vulnerabilities for packages: solr, kubeflow-katib...

GHSA-3VM4-22FP-5RFM vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-3VM4-22FP-5RFM vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-83G2-8M93-V3W7 vulnerabilities

Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, hey, k3d...

GHSA-8XMX-H8RQ-H94J vulnerabilities

Vulnerabilities for packages: k3d...

Duplicate Advisory: Improper Neutralization of CRLF Sequences in dio

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-9324-jv53-9cc8. This link is maintained to preserve external references. Original Description The dio package prior to 5.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a...

GHSA-F3FP-GC8G-VW66 vulnerabilities

Vulnerabilities for packages: ctop, podman...

GHSA-F3FP-GC8G-VW66 vulnerabilities

Vulnerabilities for packages: podman, ctop...

GHSA-4WRC-F8PQ-FPQP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-RJ7P-RFGP-852X vulnerabilities

Vulnerabilities for packages: trino, druid...

GHSA-C27H-MCMW-48HV vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-C27H-MCMW-48HV vulnerabilities

Vulnerabilities for packages: tez...

GHSA-R5C5-PR8J-PFP7 vulnerabilities

Vulnerabilities for packages: k3d...

Grafana Datasource Network Restriction Bypass Vulnerability (GHSA-9rrr-6fq2-4f99)

Grafana is prone to a datasource network restriction bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

GHSA-X7F3-62PM-9P38 vulnerabilities

Vulnerabilities for packages: opa...

MAL-2022-5243 Malicious code in paypal-rest-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5c6beb6bf6ebdd58d3baff1e4017eacb25c5cda9a802eb8dbb5e2d2abbd8b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...