Malicious code in element-block-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6f663cc9659fa8c59510bbcafc19cd5f945595016e12e8f603250d824196cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in element-block-starter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Security Bulletin: IBM Security Verify Information Queue has a third-party library vulnerability (CVE-2023-43642)

Summary IBM Security Verify Information Queue ISIQ v10.0.7 has upgraded its Apache Kafka client to remediate a vulnerability in the snappy-java compression library. Vulnerability Details CVEID:CVE-2023-43642 DESCRIPTION: snappy-java is vulnerable to a denial of service, caused by missing upper...

org.apache.dubbo:dubbo-spring-boot-actuator (3.1.5), org.apache.dubbo:dubbo-spring-boot-actuator-compatible (3.1.5) +5 more potentially affected by CVE-2023-46279 via org.apache.dubbo:dubbo (3.1.5)

org.apache.dubbo:dubbo MAVEN version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - org.apache.dubbo:dubbo-spring-boot-actuator 3.1.5 - org.apache.dubbo:dubbo-spring-boot-actuator-compatible 3.1.5 -...

org.apache.dubbo:dubbo-spring-boot-actuator (3.1.5), org.apache.dubbo:dubbo-spring-boot-actuator-compatible (3.1.5) +5 more potentially affected by CVE-2023-46279 via org.apache.dubbo:dubbo (3.1.5)

org.apache.dubbo:dubbo MAVEN version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - org.apache.dubbo:dubbo-spring-boot-actuator 3.1.5 - org.apache.dubbo:dubbo-spring-boot-actuator-compatible 3.1.5 -...

WordPress Premium Starter Templates Plugin < 3.2.5 SSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.127659";...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50102 Source...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50137 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50100 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50101 Source...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-3)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 Source cves: CVE-2023-46750 Source advisory: OSV:GHSA-HHW5-C326-822H...

com.sap.cds:cds-starter-cloudfoundry (>=2.2.0, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.2.0, <=2.4.0) +5 more potentially affected by CVE-2023-50422 via com.sap.cloud.security:spring-security (>=3.0.0, <=3.2.1)

com.sap.cloud.security:spring-security MAVEN version =3.0.0, =2.2.0, =2.2.0, =1.0.4, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.4.0 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cds:cds-starter-cloudfoundry (>=2.0.1, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.0.1, <=2.4.0) +2 more potentially affected by CVE-2023-50422 via com.sap.cloud.security.xsuaa:spring-xsuaa (>=3.0.0, <=3.2.1)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =3.0.0, =2.0.1, =2.0.1, =3.0.0, =3.0.0, =3.2.1 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cds:cds-starter-cloudfoundry (>=1.2.0, <=1.34.7), com.sap.cds:cds-starter-k8s (>=1.34.0, <=1.34.7) +4 more potentially affected by CVE-2023-50422 via com.sap.cloud.security.xsuaa:spring-xsuaa (>=2.0.0, <=2.16.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =2.0.0, =1.2.0, =1.34.0, =2.11.16, =2.5.2, =2.0.0, =2.0.0, =2.16.0 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security.xsuaa:spring-xsuaa-mock (1.6.0), com.sap.cloud.security.xsuaa:xsuaa-spring-boot-starter (1.6.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (1.6.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security.xsuaa:spring-xsuaa and may be impacted: - com.sap.cloud.security.xsuaa:spring-xsuaa-mock 1.6.0 -...

com.sap.cds:cds-starter-cloudfoundry (>=2.0.1, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.0.1, <=2.4.0) +2 more potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (>=3.0.0, <=3.2.1)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =3.0.0, =2.0.1, =2.0.1, =3.0.0, =3.0.0, =3.2.1 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...