497 matches found
gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-48818 via starlette (0.41.2)
starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-48818 Source advisor...
gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-48710 via starlette (0.41.2)
starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-48710 Source advisor...
CVE-2020-7605
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...
CVE-2020-7601
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...
Malicious code in gulp-inject-envs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337 The package gulp-inject-envs was found to contain malicious code. Source: ghsa-malware 5dafa09839ea07c586670ac1a302805fb65ffaf32d1641dcab2be569a68231...
EUVD-2025-199149
Malicious code in gulp-inject-envs npm...
ff-build (>=2.4.0, <=2.6.1) potentially affected by unknown CVE via gulp-inject-envs (1.2.0)
gulp-inject-envs NPM version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-inject-envs and may be impacted: - ff-build =2.4.0, =2.6.1 Source cves: unknown CVE Source advisory: GHSA-F74H-JM63-V9H3...
MAL-2025-191105 Malicious code in gulp-inject-envs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337 The package gulp-inject-envs was found to contain malicious code. Source: ghsa-malware 5dafa09839ea07c586670ac1a302805fb65ffaf32d1641dcab2be569a68231...
EUVD-2025-177866
Malicious code in meteor-chalk-blueshift-gulp npm...
MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175830
Malicious code in umbriel-gulp-sqlite-shelljs npm...
EUVD-2025-178627
Malicious code in gulp-prettier-spinner-parallax npm...
MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178629
Malicious code in gulp-oberon-husky-start npm...
EUVD-2025-178631
Malicious code in gulp-javascript-carpo-markdown-pdf npm...
EUVD-2025-180196
Malicious code in avior-gulp-sagitta-ganymede npm...
EUVD-2025-180115
Malicious code in bellatrix-gulp-barnard-dagda npm...
Malicious code in gulp-parcel-bioinformatics-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e954d5023f3652da9264a4ff04b69f8bb31573498561742734a9118e944fb11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...