Malicious code in quinoa-quokka-bwuy (npm)

The package quinoa-quokka-bwuy was found to contain malicious code...

Malicious code in quokka-dock-ovyg (npm)

The package quokka-dock-ovyg was found to contain malicious code...

Malicious code in ferry-quokka-5r3g (npm)

The package ferry-quokka-5r3g was found to contain malicious code...

Malicious code in quokka-quebec-9d0l (npm)

The package quokka-quebec-9d0l was found to contain malicious code...

Malicious code in quokka-eggplant-qcqy (npm)

The package quokka-eggplant-qcqy was found to contain malicious code...

Malicious code in quokka-bark-krv5 (npm)

The package quokka-bark-krv5 was found to contain malicious code...

MAL-2025-31444 Malicious code in quokka-xenon-ypi7 (npm)

The package quokka-xenon-ypi7 was found to contain malicious code...

MAL-2025-31443 Malicious code in quokka-quebec-9d0l (npm)

The package quokka-quebec-9d0l was found to contain malicious code...

MAL-2025-23420 Malicious code in island-quokka-u0mv (npm)

The package island-quokka-u0mv was found to contain malicious code...

MAL-2025-31439 Malicious code in quokka-castle-tkkj (npm)

The package quokka-castle-tkkj was found to contain malicious code...

CVE-2020-18705

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...

CVE-2020-18703

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

CVE-2020-18702

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...

[SECURITY] [DLA 4138-1] distro-info-data database update

Debian LTS Advisory DLA-4138-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 26, 2025 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u8 This is a routine update of the distro-info-data database for Debian LTS users. It adds Ubunt...

Debian dla-4138 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4138 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4138-1 [email protected] https://www.debian.org/lts/security/...

GHSA-4Q2R-QXP6-H5J6 Improper Restriction of XML External Entity Reference in Quokka

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...

Improper Restriction of XML External Entity Reference in Quokka

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...

GHSA-3XG5-6C3J-VP8X Improper Restriction of XML External Entity Reference in Quokka

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

Improper Restriction of XML External Entity Reference in Quokka

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

GHSA-5M69-3CHG-6F8M Cross Site Scripting (XSS) in Quokka

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...