Myndr: CORS Misconfiguration / Broken Access Control

A CORS misconfiguration was discovered on the admin panel that allowed any website hosted on a subdomain of the target organization to read authenticated admin responses, including CSRF nonces and session data. This vulnerability could have enabled full admin account takeover through a CSRF attac...

Malicious code in @myndr/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3076718e34641b734beda559eda4aacb4aa9799c37cc7cdb3f7d110f8255ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...