django-easy-login (>=0.1.0.dev0, <=0.1.0.dev2), nemo (>=1.14.2, <=1.14.3) potentially affected by CVE-2024-45231 via django (1.11.22)

django PYPI version 1.11.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-easy-login =0.1.0.dev0, =1.14.2, =1.14.3 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

nemo (>=1.11.1, <=1.14.0), opencensus-ext-django (>=0.1.0, <=0.3.1) potentially affected by CVE-2024-45231 via django (1.11.20)

django PYPI version 1.11.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.11.1, =0.1.0, =0.3.1 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

koalix-crm (1.12.1), nemo (1.14.1) potentially affected by CVE-2024-45231 via django (1.11.21)

django PYPI version 1.11.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - koalix-crm 1.12.1 - nemo 1.14.1 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

cheetay-logs (1.0.6), nemo (>=1.2.1, <=1.10.0) potentially affected by CVE-2024-45231 via django (1.11.15)

django PYPI version 1.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cheetay-logs 1.0.6 - nemo =1.2.1, =1.10.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

connect-telegram-bot (>=1.0.0, <=1.0.1), nemo (>=3.9.0, <=3.9.1) +1 more potentially affected by CVE-2024-45231 via django (2.2.19)

django PYPI version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - connect-telegram-bot =1.0.0, =3.9.0, =1.0.3, =1.0.6 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

bugdoc (0.1.0), nemo (1.23.0) +1 more potentially affected by CVE-2024-45231 via django (1.11.28)

django PYPI version 1.11.28 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - bugdoc 0.1.0 - nemo 1.23.0 - pyxon 0.0.1 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

kwikapi-django (>=0.2.6, <=0.2.8), nemo (>=1.14.4, <=1.21.1) +1 more potentially affected by CVE-2024-45231 via django (1.11.23)

django PYPI version 1.11.23 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kwikapi-django =0.2.6, =1.14.4, =1.21.1 - pyblue 2022.8.1 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

nemo (>=1.22.0, <=1.22.1), patchman (>=1.2.3, <=1.2.4) potentially affected by CVE-2024-45231 via django (1.11.27)

django PYPI version 1.11.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.22.0, =1.2.3, =1.2.4 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

Malicious code in @diotoborg/nemo-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dc1bc1c432934e97b6a1fd2e19453c9d2381b91ab862b179dc8b24492333a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/nemo-reprehenderit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/nemo-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8745d1330fe8b20f8a676f1d834b53d6ad43ebb059d9c96d94acd7ab78dadb6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8456 Malicious code in @diotoborg/nemo-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8745d1330fe8b20f8a676f1d834b53d6ad43ebb059d9c96d94acd7ab78dadb6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/nemo-voluptatibus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/natus-similique-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ea3a0d44af0ce80a8be779e4d5d744999674e21b1ae58416f3a682574478c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/natus-similique-nemo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/totam-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd88f8d859a39bf19875ed8405b9250aa13c5c21b3f1cca74834d9090172aed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/totam-nemo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @zitterorg/nemo-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41edbd03c6d4329bed5847f9b7b947f9220ea54a02ba2b59c008f835a1118a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zitterorg/nemo-tenetur

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @zitterorg/nemo-dolorem

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...