br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

Malicious code in atlassian-marathon-asset-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d32d9c71cf7460230bdc7da7e9c9cddc9618a5ca53a66adde25fb5a3e588418 The package atlassian-marathon-asset-pipeline was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview atlassian-marathon-asset-pipeline is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview marathon-assets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-3782 Malicious code in atlassian-marathon-asset-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d32d9c71cf7460230bdc7da7e9c9cddc9618a5ca53a66adde25fb5a3e588418 The package atlassian-marathon-asset-pipeline was found to contain malicious code. Source: ghsa-malware...

Malicious code in marathon-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdc9efb8f4187062e02260f2126eda85583ad4d7e274c7f3c5d72b900e3eff3 The package marathon-assets was found to contain malicious code. Source: ghsa-malware 79835a80726adeabd12385031ae8c8a34d577b780fce22a9eb86304161ab2aa...

MAL-2026-3792 Malicious code in marathon-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdc9efb8f4187062e02260f2126eda85583ad4d7e274c7f3c5d72b900e3eff3 The package marathon-assets was found to contain malicious code. Source: ghsa-malware 79835a80726adeabd12385031ae8c8a34d577b780fce22a9eb86304161ab2aa...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

EUVD-2006-6646

Malware in sbrugna...

EUVD-2017-18916

Malware in sbrugna...

EUVD-2006-6647

Malware in sbrugna...

CVE-2017-20198

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

CVE-2017-20198

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

CVE-2017-20198 DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

CVE-2017-20198

CVE-2017-20198 affects DC/OS Marathon UI

CVE-2017-20198 DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

CVE-2017-20198: Incorrect Permission Assignment for Critical Resource

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

D2iQ DC/OS Marathon security vulnerabilities

D2iQ DC/OS Marathon is a native task scheduler from US-based D2iQ. A security vulnerability exists in D2iQ DC/OS Marathon versions prior to 1.9.0, which stems from an insufficient restriction on volume mount configurations that could lead to arbitrary Docker container deployments...

com.atlassian.stride:stride-auth (>=2.0.0, <=3.0.3), com.atlassian.stride:stride-boot (>=2.0.0, <=3.0.3) +19 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (4.23)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.stride:stride-auth =2.0.0, =2.0.0, =2.0.0, =0.3.1, =1.3.0-158, =1.3.0-158, =1.3.0-158,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...