Malicious code in starling-api-web-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in starling-api-web-starter-kit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8605 Malicious code in starling-api-web-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.6.0), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.6.0) +1 more potentially affected by CVE-2023-47467 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.6.0)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.0 Source cves: CVE-2023-47467 Source advisory: OSV:GHSA-RGG9-264H-3HFW...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.6.0), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.6.0) +1 more potentially affected by CVE-2023-47467 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.6.0)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.0 Source cves: CVE-2023-47467 Source advisory: GHSA-RGG9-264H-3HFW...

Debian DSA-5560-1 : strongswan - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5560 advisory. Florian Picca reported a bug in the charon-tkm daemon in strongSwan an IKE/IPsec suite. The TKM-backed version of the charon IKE daemon charon-tkm doesn't check the...

Malware in gatsby-starter-gitlab

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8431 Malicious code in gatsby-starter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-starter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

top.tangyh.basic:lamp-all (>=3.5.3, <=3.7.0), top.tangyh.basic:lamp-boot-util (>=3.5.3, <=3.7.0) +12 more potentially affected by CVE-2023-31579 via top.tangyh.basic:lamp-core (>=3.4.0, <=3.7.0)

top.tangyh.basic:lamp-core MAVEN version =3.4.0, =3.5.3, =3.5.3, =3.4.0, =3.4.0, =3.5.3, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.7.0 - top.tangyh.basic:lamp-xss-starter 3.7.0 Source cves: CVE-2023-31579 Source advisory: GHSA-XR8C-MQ5X-5F56...

top.tangyh.basic:lamp-all (>=3.5.3, <=3.7.0), top.tangyh.basic:lamp-boot-util (>=3.5.3, <=3.7.0) +12 more potentially affected by CVE-2023-31579 via top.tangyh.basic:lamp-core (>=3.4.0, <=3.7.0)

top.tangyh.basic:lamp-core MAVEN version =3.4.0, =3.5.3, =3.5.3, =3.4.0, =3.4.0, =3.5.3, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.7.0 - top.tangyh.basic:lamp-xss-starter 3.7.0 Source cves: CVE-2023-31579 Source advisory: MEND:CVE-2023-31579...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: OSV:GHSA-3J2F-58RQ-G6P7...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: GHSA-3J2F-58RQ-G6P7...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: MEND:CVE-2023-31581...

com.gitee.pulanos.pangu:pangu-gateway-spring-boot-starter (>=5.0.7, <=5.1.0), io.github.shuigedeng:taotao-cloud-starter-actuator (2023.08) +330 more potentially affected by CVE-2023-25753 via org.apache.shenyu:shenyu-common (>=2.4.0, <=2.5.1)

org.apache.shenyu:shenyu-common MAVEN version =2.4.0, =5.0.7, =2022.09, =2023.2.01, =2022.11, =2022.11, =2022.11, =2022.09, =2023.02, =2022.11, =2022.11, =2023.04, =2022.11, =2022.11, =2022.09, =2022.10 and more Source cves: CVE-2023-25753 Source ad...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.3), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.3) +1 more potentially affected by CVE-2023-40989 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.3)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.3 Source cves: CVE-2023-40989 Source advisory: GHSA-RWHX-6HX7-PQC8...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.5), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.5) +1 more potentially affected by CVE-2023-40989 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.5)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.5 Source cves: CVE-2023-40989 Source advisory: OSV:GHSA-RWHX-6HX7-PQC8...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.5), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.5) +1 more potentially affected by CVE-2023-40989 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.5)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.5 Source cves: CVE-2023-40989 Source advisory: MEND:CVE-2023-40989...

cc.vihackerframework:vihacker-web-starter (1.0.8.r), cloud.piranha.http:piranha-http-undertow (>=22.11.0, <=23.4.0) +345 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (>=2.3.0.final, <=2.3.4.final)

io.undertow:undertow-core MAVEN version =2.3.0.final, =22.11.0, =22.11.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.4.1, =3.0.1.0, =3.0.1.0, =4.0.0-draft.2, =4.0.0-draft.2, =22.10.1, =22.10.1, =23.2.1 and more Source cves: CVE-2023-1108 Source advisory: OSV:GHSA-M4MM-PG93-FV78...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...