CLSA-2026-1773965927 TuxCare security update for knockout (1 CVE)

TuxCare rebuilt knockout to address 1 CVE. Fixed in 3.2.0-tuxcare.1...

CLSA-2026-1772583208 TuxCare security update for knockout (1 CVE)

TuxCare rebuilt knockout to address 1 CVE. Fixed in 3.4.2-tuxcare.2...

CLSA-2026-1772583210 TuxCare security update for knockout (1 CVE)

TuxCare rebuilt knockout to address 1 CVE. Fixed in 2.3.0-tuxcare.2...

PT-2026-74046

TuxCare rebuilt knockout to address 1 CVE. Fixed in 3.2.0-tuxcare.1...

PT-2026-73861

TuxCare rebuilt knockout to address 1 CVE. Fixed in 2.3.0-tuxcare.2...

PT-2026-73860

TuxCare rebuilt knockout to address 1 CVE. Fixed in 3.4.2-tuxcare.2...

EUVD-2019-0736

Malware in sbrugna...

EUVD-2020-0394

Malware in sbrugna...

Malware in braze-i18n-knockout

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in braze-i18n-knockout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca6ae5dbaa6927991987f0b0e26192dcbfc2fbcbeeca91e3cb34621bd6f1a48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3721 Malicious code in braze-i18n-knockout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca6ae5dbaa6927991987f0b0e26192dcbfc2fbcbeeca91e3cb34621bd6f1a48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Out-of-Date Knockout JS Detected

An out-of-date version of Knockout JS has been detected. An outdated version could have vulnerabilities or missing security features. No source data...

XSS

Withdrawn: Duplicate of GHSA-vcjj-xf2r-mwvc. Knockout, before 3.5.0-beta, has an XSS injection point in attr name binding for browser IE7 and older...

GHSA-QFMR-6QVH-49GM XSS

Withdrawn: Duplicate of GHSA-vcjj-xf2r-mwvc. Knockout, before 3.5.0-beta, has an XSS injection point in attr name binding for browser IE7 and older...

Knockout.js XSS

The vulnerability of the Knockout.js library is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow a remote attacker to perform cross-site scripting attacks...

GHSA-VCJJ-XF2R-MWVC XSS in knockout

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

XSS in knockout

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

@cardgamesplay/klondike (>=0.1.0, <=0.1.1), @devexpress/analytics-core (>=18.2.7, <=19.1.1-alpha-19071-2010) +62 more potentially affected by CVE-2019-14862 via knockout (>=3.0.0, <=3.5.0-beta)

knockout NPM version =3.0.0, =0.1.0, =18.2.7, =4.0.0, =0.1.0-zgx, =0.1.0, =1.0.0, =0.0.1, =0.2.20, =18.2.7, =17.2.2-beta, =18.2.7, =2.0.1-beta, =2.0.4-beta - dotnetify-path-fix 1.0.0-beta and more Source cves: CVE-2019-14862 Source advisory: OSV:GHSA-VCJJ-XF2R-MWVC...

@cardgamesplay/klondike (>=0.1.0, <=0.1.1), @devexpress/analytics-core (>=18.2.7, <=19.1.1-alpha-19071-2010) +62 more potentially affected by CVE-2019-14862 via knockout (>=3.0.0, <=3.5.0-beta)

knockout NPM version =3.0.0, =0.1.0, =18.2.7, =4.0.0, =0.1.0-zgx, =0.1.0, =1.0.0, =0.0.1, =0.2.20, =18.2.7, =17.2.2-beta, =18.2.7, =2.0.1-beta, =2.0.4-beta - dotnetify-path-fix 1.0.0-beta and more Source cves: CVE-2019-14862 Source advisory: GHSA-VCJJ-XF2R-MWVC...

CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...