org.apache.camel.springboot:camel-infinispan-embedded-starter (3.20.1), org.infinispan:infinispan-distribution (13.0.14.final) +13 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (13.0.14.final)

org.infinispan:infinispan-query MAVEN version 13.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 3.20.1 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.18.5, <=3.20.6), org.apache.camel:camel-infinispan-embedded (>=3.18.5, <=3.18.8) +14 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (13.0.15.final)

org.infinispan:infinispan-query MAVEN version 13.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.18.5, =3.18.5, =3.18.8 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.20.8, <=3.22.4), org.infinispan:infinispan-distribution (13.0.20.final) +13 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (13.0.20.final)

org.infinispan:infinispan-query MAVEN version 13.0.20.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.20.8, =3.22.4 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.14.5, <=3.14.7), org.infinispan:infinispan-javadoc-all (12.1.12.final) +12 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (12.1.12.final)

org.infinispan:infinispan-query MAVEN version 12.1.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.14.5, =3.14.7 -...

net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.12), org.springframework.boot:spring-boot-starter-social-twitter (>=1.1.0.release, <=1.1.5.release) +1 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (3.2.4.release)

org.springframework.security:spring-security-crypto MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - net.gplatform:sudoor-server-lib =1.0.4,...

com.ahome-it:ahome-tooling-server-core (>=1.0.109-release, <=1.0.121-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.109-release, <=1.0.121-release) +7 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (4.0.2.release)

org.springframework.security:spring-security-crypto MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.ahome-it:ahome-tooling-server-core...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2508 Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13924

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2024-13924

CVE-2024-13924 affects Starter Templates by FancyWP (WordPress plugin) up to version 2.0.0, enabling unauthenticated Blind Server-Side Request Forgery via the http_request_host_is_external filter. This SSRF could let an attacker make web requests from the vulnerable WordPress instance to arbitrar...

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress plugin Starter Templates by FancyWP: Code issues and vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2024-13924: Server-Side Request Forgery (SSRF)

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

PT-2025-10425

Name of the Vulnerable Software and Affected Versions The Starter Templates by FancyWP plugin for WordPress versions prior to 2.1 Description The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. This can be used to query and...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

io.pebbletemplates:pebble-spring-boot-starter (2.5.1), io.pebbletemplates:pebble-spring3 (2.5.1) +1 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.5.1)

io.pebbletemplates:pebble MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.1 - io.pebbletemplates:pebble-spring3 2.5.1 -...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.0), io.pebbletemplates:pebble-spring-boot-starter (2.6.0) +8 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.6.0)

io.pebbletemplates:pebble MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.0 - io.pebbletemplates:pebble-spring-boot-starter 2.6.0 -...

Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...