MAL-2025-9074 Malicious code in @malware-test-wings-avian-prism-puddy/test-mlw3-wings-avian-prism-puddy (npm)

The package @malware-test-wings-avian-prism-puddy/test-mlw3-wings-avian-prism-puddy was found to contain malicious code...

MAL-2025-29658 Malicious code in prism-u2fo8-fwgoi-quill-project (npm)

The package prism-u2fo8-fwgoi-quill-project was found to contain malicious code...

Malicious code in prism-u2fo8-fwgoi-quill-project (npm)

The package prism-u2fo8-fwgoi-quill-project was found to contain malicious code...

MAL-2025-29655 Malicious code in prism-5zjuf-caevv-harp-project (npm)

The package prism-5zjuf-caevv-harp-project was found to contain malicious code...

CVE-2025-54798 vulnerabilities

Vulnerabilities for packages: prism, lerna, kubeflow-centraldashboard, saf, kubeflow-katib, py3-jupyterlab, opensearch-dashboards...

GHSA-52F5-9888-HMC6 vulnerabilities

Vulnerabilities for packages: prism, lerna, kubeflow-centraldashboard, saf, kubeflow-katib, py3-jupyterlab, opensearch-dashboards...

GHSA-52F5-9888-HMC6 vulnerabilities

Vulnerabilities for packages: saf, vitess, opensearch-dashboards, tensorflow-cpu-jupyter, arangodb, drupal, lerna, homepage, prism, kubeflow-katib, opensearch-dashboards-fips, kubeflow-centraldashboard, py3-jupyterlab, kibana...

CVE-2025-54798 vulnerabilities

Vulnerabilities for packages: saf, vitess, opensearch-dashboards, tensorflow-cpu-jupyter, arangodb, drupal, lerna, homepage, prism, kubeflow-katib, opensearch-dashboards-fips, kubeflow-centraldashboard, py3-jupyterlab, kibana...

GHSA-FJXV-7RQG-78G4 vulnerabilities

Vulnerabilities for packages: prism, jitsucom-jitsu, kubeflow-centraldashboard, tileserver-gl, sqlpad, kubeflow-katib, opensearch-dashboards, kubeflow-pipelines...

CVE-2025-7783 vulnerabilities

Vulnerabilities for packages: prism, jitsucom-jitsu, kubeflow-centraldashboard, tileserver-gl, sqlpad, kubeflow-katib, opensearch-dashboards, kubeflow-pipelines...

Security Bulletin: There is a vulnerability in prism-1.28.0.jsused by IBM Maximo Asset Management application ( CVE-2024-53382)

Summary There is a vulnerability in prism-1.28.0.js used by IBM Maximo Asset Management application CVE-2024-53382 Vulnerability Details CVEID:CVE-2024-53382 DESCRIPTION: Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not...

Uncovering Reliable Indicators: Improving IoC Extraction from Threat Reports

Indicators of Compromise IoCs are critical for threat detection and response, marking malicious activity across networks and systems. Yet, the effectiveness of automated IoC extraction systems is fundamentally limited by one key issue: the lack of high-quality ground truth. Current extraction too...

CVE-2024-37209

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2...

CVE-2024-31122

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2...

CVE-2023-28423

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Prism Tech Studios Modern Footnotes plugin = 1.4.15 versions...

CVE-2022-36121

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

CVE-2022-36115

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for unintended functionality. An...

CVE-2022-36119

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for a domain authenticated user to send a crafted message to the Blue Prism Server and accomplish a remote code execution attack that is...

CVE-2022-36116

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the setValidationInfo...

CVE-2022-36118

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the SetProcessAttributes...