Malicious code in package-ion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8ac63d905d68836f3d344e37ff19f950a3ddca0da0d9bd4a857cede197c5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3928 Malicious code in ion-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1050aad6a58ade45dcccf2310e2ba454e5a663aed5ee4e9ece8a3f71786d718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5177 Malicious code in package-ion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8ac63d905d68836f3d344e37ff19f950a3ddca0da0d9bd4a857cede197c5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ion-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1050aad6a58ade45dcccf2310e2ba454e5a663aed5ee4e9ece8a3f71786d718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7045 Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-22058

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Memory corruption

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2022-22058

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2022-22058

CVE-2022-22058 describes a memory corruption due to a use-after-free in the kernel when handling ION handles, impacting Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearable...

Malicious code in ion-schema-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4a2800c0cdb5a431b4b8f4465ae513b1bde0d95be14f21a2fde8bb5f6733cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3929 Malicious code in ion-schema-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4a2800c0cdb5a431b4b8f4465ae513b1bde0d95be14f21a2fde8bb5f6733cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Input validation

Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

Prototype Pollution

ion-parser is vulnerable to prototype pollution. A remote attacker is able to pollute object creations by passing a crafted malicious payload to parse function via a crafted INI file...

GHSA-7VRV-5M2H-RJW9 ion-parser Prototype Pollution when malicious INI file submitted to application that parses with `parse`

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context...

@arnau/gatsby-transformer-toml (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-28462 via ion-parser (0.5.2)

ion-parser NPM version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ion-parser and may be impacted: - @arnau/gatsby-transformer-toml =1.0.0, =1.0.2 Source cves: CVE-2020-28462 Source advisory: OSV:GHSA-7VRV-5M2H-RJW9...

ion-parser Prototype Pollution when malicious INI file submitted to application that parses with `parse`

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context...

CVE-2020-28462

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context...

Code injection

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context...

CVE-2020-28462

ion-parser is affected by prototype pollution when an application uses parse to read a crafted INI file. The issue affects all versions of ion-parser and can pollute the application’s Object.prototype, enabling further exploitation depending on context. Public writeups and security feeds (e.g., S...

ion-parser 安全漏洞

ion-parser is 418sec open source one of the fastest and lightest Javascript parser for TOML and ION files . A security vulnerability exists in ion-parser that stems from the package's susceptibility to prototype contamination, which can be exploited by an attacker to submit malicious INI files to...