258 matches found
EUVD-2025-47913
Malicious code in embarrassedlemurz3n npm...
EUVD-2025-44437
Malicious code in wilylemurz3n npm...
MAL-2025-55403 Malicious code in better_lemur_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabbe95b46aaab6255338a2f20275a74102ee9108fb123140156b29691b4b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-48872
Malicious code in adorablelemurz3n npm...
EUVD-2017-0069
Malware in sbrugna...
EUVD-2016-3438
Malware in sbrugna...
EUVD-2023-0124
Malicious code in bioql PyPI...
MAL-2025-35667 Malicious code in test-mlw2-lemur-expos (npm)
The package test-mlw2-lemur-expos was found to contain malicious code...
Malicious code in test-mlw2-lemur-expos (npm)
The package test-mlw2-lemur-expos was found to contain malicious code...
Insecure Random Number Generator
lemur is vulnerable to an Insecure Random Number Generator. The vulnerability is due to insufficiently random values which may allow an attacker to guess the credentials and gain access to restricted resources...
GHSA-R4XG-4WRV-W72H Duplicate Advisory: Lemur subject to insecure random generation
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5fqv-mpj8-h7gm. This link is maintained to preserve external references. Original Description Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The...
Duplicate Advisory: Lemur subject to insecure random generation
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5fqv-mpj8-h7gm. This link is maintained to preserve external references. Original Description Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The...
CVE-2023-30797
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
PYSEC-2023-20
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
Default credentials
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
PYSEC-2023-20
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...
CVE-2023-30797
Netflix Lemur prior to version 1.3.2 is affected by insecure random number generation in default credential creation. The root cause is insufficiently random values used when generating default credentials, which may allow an attacker to guess credentials and access resources managed by Lemur. Ev...
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur...