Lucene search
K

6 matches found

Snyk
Snyk
added 2026/03/12 1:46 a.m.2 views

Malicious Package

Overview restrict-imports is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/12 1:46 a.m.5 views

Malicious code in restrict-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82360676317e6d9c2b69a82034af73f2008890871348fb45bc5b966f6aca03c The package restrict-imports was found to contain malicious code. Source: ghsa-malware e153e68a84a468be42de7a7c49af2d4e73778f4462d854be60a6e8baf03105...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/03/12 1:46 a.m.3 views

MAL-2026-1353 Malicious code in restrict-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82360676317e6d9c2b69a82034af73f2008890871348fb45bc5b966f6aca03c The package restrict-imports was found to contain malicious code. Source: ghsa-malware e153e68a84a468be42de7a7c49af2d4e73778f4462d854be60a6e8baf03105...

5.7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.3 views

PT-2024-38774 · Progress · Telerik Document Processing Libraries

Name of the Vulnerable Software and Affected Versions: Progress Telerik Document Processing Libraries versions prior to 2024 Q4 2024.4.1106 Description: The issue arises when importing a document with unsupported features, leading to excessive processing and excessive use of computing resources...

6.5CVSS7.2AI score0.00412EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.1 views

PT-2024-31725 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp versions prior to 5.4.3 Description: A heap-based buffer overflow issue allows a local attacker to execute arbitrary code by importing a specially crafted file into the product. This can be achieved through the import functionality of...

8.4CVSS6.7AI score0.00274EPSS
Exploits2References22
Positive Technologies
Positive Technologies
added 2024/06/10 12:0 a.m.3 views

PT-2024-37999 · H2O · H2O

Name of the Vulnerable Software and Affected Versions: H2O versions prior to 3.38.0 Description: The H2O machine learning platform uses "Iced" classes to move Java objects around the cluster, which supports the inclusion of serialized Java objects. When a model is deserialized, any class is allow...

7.7CVSS8AI score0.00643EPSS
Exploits0References15
Rows per page
Query Builder