@adobe/git-server (>=0.9.18 <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293 <=6.1.0) +37 more potentially affected by CVE-2022-40764 via snyk-go-plugin (>=1.10.0 <=1.17.0)

snyk-go-plugin NPM version =1.10.0, =0.9.18, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =0.2.0, =0.2.8 and more Source cves: CVE-2022-40764 Source advisory: OSV:GHSA-HPQJ-7CJ6-HFJ8...

@adobe/helix-deploy (>=7.0.0 <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0 <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

helix-felix.it Cross Site Scripting vulnerability OBB-2806785

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview helix-status-service is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview helix-rum-collector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious Package

Overview helix-contentsource-connector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview helix-run-query is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-slack-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9520877ee689f4ae7ba25d861168d154264a54e831d5496ceb94a7e46fa8a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-status-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ae9c42e35bc9b3136b4c0ed2e9a7c487f132d8b8e60c336a22cd4be80a3c282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-run-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3bbd6572566ee67b93b08556dbb6c301091b2feb4e310ab55697867517d602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3591 Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3595 Malicious code in helix-status-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ae9c42e35bc9b3136b4c0ed2e9a7c487f132d8b8e60c336a22cd4be80a3c282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3594 Malicious code in helix-slack-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9520877ee689f4ae7ba25d861168d154264a54e831d5496ceb94a7e46fa8a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3592 Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

moodle.helixlearning.nl Cross Site Scripting vulnerability OBB-2154346

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

Input validation

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...