io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.fitbur.testify.examples:example-junit-springboot-systemtest (>=0.1.0, <=0.1.3), com.github.almex:raildelays-assembly-descriptor (>=2.0.0-beta.1, <=2.0.0-beta.2) +5 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.3.14.final)

io.undertow:undertow-core MAVEN version 1.3.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fitbur.testify.examples:example-junit-springboot-systemtest =0.1.0, =2.0.0-beta.1, =2.0.0-beta.1,...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +11 more potentially affected by CVE-2024-34750 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =2.0.0, =2.0.2 Source cves: CVE-2024-34750 Source advisory: GHSA-WM9W-RJJ3-J356...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +11 more potentially affected by CVE-2024-34750 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =2.0.0, =2.0.2 Source cves: CVE-2024-34750 Source advisory: OSV:GHSA-WM9W-RJJ3-J356...

MAL-2024-1676 Malicious code in world-id-onchain-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23beae0d76f8d9d9ccbbe5079e8186b31119aa5d9ad66fe8fc49713db22dc4d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in world-id-onchain-starter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in world-id-onchain-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23beae0d76f8d9d9ccbbe5079e8186b31119aa5d9ad66fe8fc49713db22dc4d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-3054 Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ontology-starter-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3602d6737a3861487c258043efce70d2c7fe3708e9dabb0805841c5fddf6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1738 Malicious code in ai-chatbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9d2068c841a174507d461d5d7113108623c8d971ee140701fe429feaf8e83c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-saas-email (>=0.1.21, <=0.1.29) +8 more potentially affected by CVE-2024-38356 via django-tinymce (>=1.5.1b4, <=4.0.0)

django-tinymce PYPI version =1.5.1b4, =202304.1100.0, =0.1.21, =0.8.0, =3.3.3, =0.6.0, =0.1.3.2, =1.0.0b1, =0.3.0, =0.5.2 - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-38356 Source advisory: MEND:CVE-2024-38356...

django-starter-toolkit (0.1.0), geonode (>=4.0.1, <=4.0.3) potentially affected by CVE-2024-38356 via django-tinymce (3.5.0)

django-tinymce PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-starter-toolkit 0.1.0 - geonode =4.0.1, =4.0.3 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...