206 matches found
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the BrokerNotAliveException message when the RabbitMQ management aliveness check fails. An attacker can obtain sensitive credentials by accessing exception messages that are logged,...
MAL-2026-11621 Malicious code in @onereach/pnpm-audit-junit (npm)
npm/@onereach/pnpm-audit-junit is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @onereach/pnpm-audit-junit (npm)
npm/@onereach/pnpm-audit-junit is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CLEANSTART-2026-WE99006 Security fixes in junit 4.13.1-r0
Package junit version 4.13.1-r0 fixes 1 vulnerabilities: CVE-2020-15250...
javapackages-tools:201801 security update
An update is available for module.apache-commons-parent, module.maven-plugins-pom, xmlunit, felix-utils, module.ant, maven-common-artifact-filters, module.maven-assembly-plugin, module.maven-archiver, module.jvnet-parent, module.xml-commons-apis, module.jboss-parent, module.felix-osgi-compendium,...
Security Bulletin: Vulnerability in JUnit4 shipped with Tivoli Netcool/OMNIbus (CVE-2020-15250)
Summary A vulnerability in JUnit4 that is used by the Mib Manager GUI component, in Netcool/OMNIbus, has been addressed. Vulnerability Details CVEID:CVE-2020-15250 DESCRIPTION: In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: junit (UTSA-2026-016613)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016613 advisory. In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's...
Astra Linux – Vulnerability in junit4
In JUnit 4, versions starting from 4.7 and before 4.13.1, the TemporaryFolder test rule contains a local information disclosure vulnerability. On Unix-like systems, the system’s temporary directory is shared among all users on that system. As a result, when files and directories are written to th...
SUSE-SU-2026:21608-1 Security update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu
This update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu fixes the following issues: Changes in ongres-scram: - Version 3.2 Fix Timing Attack Vulnerability in SCRAM Authentication bsc1250399, CVE-2025-59432 Updated dependencies and maven plugins Use...
Azure Linux 3.0 Security Update: junit (CVE-2020-15250)
The version of junit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-15250 advisory. - In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information...
EUVD-2025-198912
Malicious code in @postman/wdio-junit-reporter npm...
Malicious code in @postman/wdio-junit-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6f5998a89d257823fdf6368153d30126e695eb96b8ba6a5cd500fe661b8f8 The package @postman/wdio-junit-reporter was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190913 Malicious code in @postman/wdio-junit-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6f5998a89d257823fdf6368153d30126e695eb96b8ba6a5cd500fe661b8f8 The package @postman/wdio-junit-reporter was found to contain malicious code. Source: google-open-source-security...
EUVD-2021-1243
Malware in sbrugna...
EUVD-2022-5683
Malicious code in bioql PyPI...
EUVD-2023-2305
Malicious code in bioql PyPI...
EUVD-2023-0762
Malicious code in bioql PyPI...
EUVD-2022-5753
Malicious code in bioql PyPI...