Malicious code in talon-template-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cba7b477e6e7c8fa9c79551e7a5035c22a680dcfbfaefba806a9c0c7a7b2046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-pay-cloud-starter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1988214db41a3d1764e3f6536359acbc08be5c669740b341aa43ace49cfe55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.vaadin:vaadin (>=22.0.6, <=22.0.14), com.vaadin:vaadin-core (>=22.0.6, <=22.0.14) +9 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin-grid-flow (>=22.0.6, <=22.0.14)

com.vaadin:vaadin-grid-flow MAVEN version =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.6, =22.0.14 Source cves: CVE-2022-29567 Source advisory: GHSA-QFR3-323W-QV27...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

org.keycloak:keycloak-adapter-core (2.5.4.final), org.keycloak:keycloak-default-spring-boot-starter (2.5.4.final) +13 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (2.5.4.final)

org.keycloak:keycloak-authz-client MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.4.final -...

org.keycloak:keycloak-adapter-core (3.0.0.cr1), org.keycloak:keycloak-default-spring-boot-starter (3.0.0.cr1) +13 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.0.0.cr1)

org.keycloak:keycloak-authz-client MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 3.0.0.cr1 -...

org.keycloak:keycloak-adapter-core (3.4.0.cr1), org.keycloak:keycloak-fuse-adapter-dist (3.4.0.cr1) +10 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.4.0.cr1)

org.keycloak:keycloak-authz-client MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.0.cr1 - org.keycloak:keycloak-fuse-adapter-dist...

org.keycloak:keycloak-adapter-core (3.4.1.cr1), org.keycloak:keycloak-fuse-adapter-dist (3.4.1.cr1) +10 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.4.1.cr1)

org.keycloak:keycloak-authz-client MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.1.cr1 - org.keycloak:keycloak-fuse-adapter-dist...

edu.byu.hbll.maven:application-parent (>=3.0.0, <=3.4.0), org.keycloak:keycloak-adapter-core (4.8.2.final) +17 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (4.8.2.final)

org.keycloak:keycloak-authz-client MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - edu.byu.hbll.maven:application-parent =3.0.0, =3.4.0 -...

org.keycloak:keycloak-adapter-core (3.2.0.cr1), org.keycloak:keycloak-fuse-adapter-dist (3.2.0.cr1) +10 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.2.0.cr1)

org.keycloak:keycloak-authz-client MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 3.2.0.cr1 - org.keycloak:keycloak-fuse-adapter-dist...

org.keycloak:keycloak-adapter-core (3.4.1.final), org.keycloak:keycloak-fuse-adapter-dist (3.4.1.final) +14 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.4.1.final)

org.keycloak:keycloak-authz-client MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.1.final -...