com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.0-rc1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.0-rc1) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.2.1-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1,...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.1, <=0.2.1) +2 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.2.2-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.2.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.1, =0.1.1, =1.1.2, =1.1....

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0, <=0.2.0), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0, <=0.2.0) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.1.0-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0, =0.1.0, =0.2.0 Source...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.3, <=0.2.3), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.3, <=0.2.3) +20 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.3)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.3, =0.1.3, =2.2.2-incubating...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.2, <=0.2.2), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.2, <=0.2.2) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.2, =0.1.2, =0.2.2 Source cve...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.4, <=0.2.4), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.4, <=0.2.4) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.4)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.4, =0.1.4, =0.2.4 Source cve...

Malware in infocaster-frontend-bootstrap-4-starter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1058 Malicious code in infocaster-frontend-bootstrap-4-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55745943f07b53663bfc73b3b50663ca02b9b94e8897b082272ea0be460c533 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.2) +1 more potentially affected by CVE-2023-38992 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.2 Source cves: CVE-2023-38992 Source advisory: GHSA-WP6C-29R3-JQW9...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.2) +1 more potentially affected by CVE-2023-38992 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.2 Source cves: CVE-2023-38992 Source advisory: OSV:GHSA-WP6C-29R3-JQW9...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.2) +1 more potentially affected by CVE-2023-38992 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.2 Source cves: CVE-2023-38992 Source advisory: MEND:CVE-2023-38992...

com.linecorp.armeria:armeria-grpc (0.84.0), com.linecorp.armeria:armeria-grpc-protocol (0.84.0) +37 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (0.84.0)

com.linecorp.armeria:armeria MAVEN version 0.84.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria and may be impacted: - com.linecorp.armeria:armeria-grpc 0.84.0 - com.linecorp.armeria:armeria-grpc-protocol 0.84.0 -...

com.linecorp.armeria:armeria-grpc (0.86.0), com.linecorp.armeria:armeria-grpc-protocol (0.86.0) +36 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (0.86.0)

com.linecorp.armeria:armeria MAVEN version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria and may be impacted: - com.linecorp.armeria:armeria-grpc 0.86.0 - com.linecorp.armeria:armeria-grpc-protocol 0.86.0 -...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-34478 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-2)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-2 Source cves: CVE-2023-34478 Source advisory: MEND:CVE-2023-34478...

WordPress Spice Starter Sites Plugin < 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Spice Starter Sites Type Plugin Vulnerable versions 1.1 Fixed in 1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9401fa99b65e Credits Rafie Muhammad Patchstack Required...

WordPress GloriousThemes Starter Sites Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software GloriousThemes Starter Sites Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fbb0bb613259 Credits Rafie Muhammad...

WordPress WordPress Everse Starter Sites – Elementor Templates Plugin < 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Everse Starter Sites – Elementor Templates Type Plugin Vulnerable versions 1.2.2 Fixed in 1.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8f53de574344 Credi...

io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +3 more potentially affected by CVE-2023-34036 via org.springframework.hateoas:spring-hateoas (0.12.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

Malicious code in js-starter-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac64c737affe45fd76d9899026d4a4d2f775e04e0391693ffcb2dafa665b07c5 The OpenSSF Package Analysis project identified 'js-starter-code' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1220 Malicious code in js-starter-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac64c737affe45fd76d9899026d4a4d2f775e04e0391693ffcb2dafa665b07c5 The OpenSSF Package Analysis project identified 'js-starter-code' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...