368 matches found
CVE-2026-2205
A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component Meteor Publication Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. Upgrading to version 8.21 is able to...
CVE-2026-2207
A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely...
EUVD-2026-5824
A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component Meteor Publication Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. Upgrading to version 8.21 is able to...
WeKan 安全漏洞
WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained security vulnerabilities. These vulnerabilities were caused by improper handling of the Rules Handler component’s file server/publications/rules.js file, which could lead to lack of...
PT-2026-6944
Name of the Vulnerable Software and Affected Versions Wekan versions up to 8.20 Description A flaw exists in Wekan that could allow information disclosure. This issue impacts an unspecified part of the server/publications/cards.js file within the Meteor Publication Handler component. The attack c...
WeKan 访问控制错误漏洞
WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained a security vulnerability related to access control. This vulnerability stemmed from improper handling of the file server/publications/cards.js component in Meteor Publication Handler, which...
Malicious code in rigel-photon-interferometry-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fdd06f2759d7a5c81facbdff2a653399e9620cc9ef3b395398eac4ca83714f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zephyr-auriga-node-config-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501e4d8965e877980be3f3890f728502f5d0980ab23ca42e8fb0f60097b5f6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in socket-decrypt-tau-big-compress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849529486d9d0d589a18e25c834f7a59aeec5d0fbfd60317298188a31ea6ec62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188434 Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52340530e8e3adf5630568ae9cf3e1425639cf4410dbbc5f52ee374a406b15ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189144 Malicious code in rehype-mesosphere-orbit-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e28a6ef17ceb60bba6aa7f7aa38fe00aeb2d6a8cebd70653412a6507744772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187544 Malicious code in iota-scripts-phoebe-geckodriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee3686e895ff09efa48a6461e060acddc8e19556f4304ce807a20d372f937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in modiov-kin-afba (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3361856150772b5516990bc450e14a2cbeba1500bd01e90bb6d14c57a75c4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in flights-lutg-oida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1712377801d05f77a800d3d4cd1b1357039593718297573da240f66b6e0acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mitok-doni-olialobna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-182568 Malicious code in imuay-avig-iy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7be7eda584d870fc1132efb3a42a1dac2bd60549d7d7ff84dad113516b8a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kidt-avog-uufacav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e6d2d4cd2e36401346b4d6897120f972d986fb63e91fcc7f2a07069d7b4a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in itale-dci-rfsfrgdrgtet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a586d58b0af955786cc2e533a5ea1783076a44333ebd9e4e2cee20b76831e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in itale-dci-fyesf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c11038079d21763a6699bf7d374123ba64e2d8e1735ede609f3312f34c323ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...