Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10783 Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

November 12, 2024—KB5046682 (Monthly Rollup)

None None...

November 12, 2024—KB5046687 (Monthly Rollup)

None None...

November 12, 2024—KB5046661 (Monthly Rollup)

None None...

November 12, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5046546)

None None...

October Linux Patch Wednesday

October Linux Patch Wednesday. There are 248 vulnerabilities in total. Of these, 92 are in the Linux Kernel. 5 vulnerabilities with signs of exploitation in the wild: Remote Code Execution - CUPS CVE-2024-47176 and 4 more CUPS vulnerabilities that can also be used to enhance DoS attacks Remote Co...

Malicious code in rollup-linux-x64-gnu (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9804 Malicious code in rollup-linux-x64-gnu (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rollup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9803 Malicious code in rollup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

Azure File Sync Agent v19.1 Release – August 2024 (KB5040924)

Update Rollup for Azure File Sync agent version 19.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

2024-10 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5044097)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v19.1 Release – August 2024 (KB5040924)

Update Rollup for Azure File Sync agent version 19.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

October 8, 2024-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5044096)

None None...

October 8, 2024—KB5044356 (Monthly Rollup)

None None...

October 8, 2024—KB5044320 (Monthly Rollup)

None None...

DOM Clobbering

Rollup is vulnerable to a DOM Clobbering. The vulnerability is due to improper handling of import.meta properties in cjs/umd/iife formats, which allows an attacker to perform cross-site scripting XSS attacks through unsanitized HTML elements, like an img tag with an unsanitized name attribute...

DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

Summary We discovered a DOM Clobbering vulnerability in rollup when bundling scripts that use import.meta.url or with plugins that emit and reference asset files from code in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting XSS in web pages where scriptless...

1k-tasks (>=4.0.0 <=4.2.2), @adobe/helix-deploy (>=9.3.8 <=9.3.14) +208 more potentially affected by CVE-2024-47068 via rollup (>=4.0.2 <=4.22.2)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =2.17.15, =1.9.12, =18.1.0, =12.0.1, =12.0.1, =12.0.1, =13.0.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...