360 matches found
EUVD-2024-3483
Malicious code in bioql PyPI...
EUVD-2022-1428
Malicious code in bioql PyPI...
EUVD-2024-0906
Malicious code in bioql PyPI...
EUVD-2024-0807
Malicious code in bioql PyPI...
EUVD-2023-2840
Malicious code in bioql PyPI...
EUVD-2022-7187
Malicious code in bioql PyPI...
EUVD-2024-0914
Malicious code in bioql PyPI...
EUVD-2025-19960
Malicious code in bioql PyPI...
EUVD-2022-1677
Malicious code in bioql PyPI...
EUVD-2025-29227
Malicious code in bioql PyPI...
EUVD-2023-0326
Malicious code in bioql PyPI...
EUVD-2022-7072
Malicious code in bioql PyPI...
EUVD-2025-18559
Malicious code in bioql PyPI...
EUVD-2022-0444
Malicious code in bioql PyPI...
EUVD-2024-0839
Malicious code in bioql PyPI...
@afif_hh/composable (=1.0.2), @afif_hh/ui_components (>=1.0.5 <=1.0.30) +24 more potentially affected by CVE-2025-57325 via rollbar (>=2.10.0 <=2.26.4)
rollbar NPM version =2.10.0, =1.0.5, =1.0.0, =0.0.5, =0.0.2-beta.1, =0.5.4, =0.8.0, =2.0.0, =0.60.1, =0.20.0-beta.4, =1.0.0, =48.0.0, =1.0.0, =1.0.3 - bnjuilopjhgthtyi =99.99.99 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
messageformat 安全漏洞
messageformat is a messageformat open source ICU message format and Unicode message format library for Javascript. A security vulnerability exists in messageformat versions prior to 3.0.1, which stems from insufficient validation of nested message keys and could lead to a prototype pollution atta...
Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2021-23450
Summary The tape library web GUI used an outdated version of the JavaScript library dojo.js containing a prototype pollution vulnerability. This could potentially be leveraged to facilitate XSS attacks in the browser, or, if executed server-side, to enable remote code execution. The issue has bee...
GHSA-G38C-WXJF-XRH6 `git-comiters` Command Injection vulnerability
Background on the vulnerability This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not saniti...