EUVD-2020-1459

Malware in sbrugna...

EUVD-2022-0612

Malicious code in bioql PyPI...

CVE-2020-27428

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

@cybergenios/scratch-gui (>=1.8.20, <=1.8.30), @cybergenios/www (>=1.0.2, <=1.0.3) +47 more potentially affected by CVE-2020-27428 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.2.0)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =1.8.20, =1.0.2, =1.3.0, =0.1.0-raspberrypifoundation.20210805151219, =0.1.0, =1.0.0-alpha.1, =0.0.1, =0.1.0, =0.0.1-0, =3.0.10, =0.1.0, =0.1.1 and more Source cves: CVE-2020-27428 Source advisory: OSV:GHSA-H3VQ-WV8J-36GW...

@cybergenios/scratch-gui (>=1.8.20, <=1.8.30), @cybergenios/www (>=1.0.2, <=1.0.3) +47 more potentially affected by CVE-2020-27428 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.2.0)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =1.8.20, =1.0.2, =1.3.0, =0.1.0-raspberrypifoundation.20210805151219, =0.1.0, =1.0.0-alpha.1, =0.0.1, =0.1.0, =0.0.1-0, =3.0.10, =0.1.0, =0.1.1 and more Source cves: CVE-2020-27428 Source advisory: GHSA-H3VQ-WV8J-36GW...

Cross-site Scripting in Scratch-Svg-Renderer

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

GHSA-H3VQ-WV8J-36GW Cross-site Scripting in Scratch-Svg-Renderer

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

CVE-2020-27428

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

CVE-2020-27428

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

Cross site scripting

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

CVE-2020-27428

CVE-2020-27428 affects the Scratch-Svg-Renderer library (v0.2.0). The vulnerability is described as a DOM-based cross-site scripting (XSS) issue that allows an attacker to execute arbitrary web scripts or HTML through a crafted sb3 file. The cited impact indicates possible code execution in the c...

CVE-2020-27428

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

CVE-2020-27428

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

PT-2022-8856

Name of the Vulnerable Software and Affected Versions Scratch-Svg-Renderer version 0.2.0 Description A DOM-based cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file. Recommendations For Scratch-Svg-Renderer version 0.2.0, update to a version...

CVE-2020-27428: Improper Neutralization of Input During Web Page Generation

A DOM-based cross-site scripting XSS vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file...

Cross-Site Scripting in scratch-svg-renderer

Overview This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function. Recommendation Upgrade to version...

@intesso/scratch-paint (0.2.0), @wdr-data/scratch-render (0.1.0-prerelease.20180918201144-fixed-1) +13 more potentially affected by CVE-2020-7750 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.2.0-prerelease.20201016121710)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =0.0.1, =0.1.0-prerelease.2019-05-26T04-34Z, =0.2.0-prerelease.20181120191526, =0.1.0-prerelease.20210117145449, =0.1.0-prerelease.20200903194013, =0.2.0-prerelease.20180531225024, =0.1.0-prerelease.20180531210700, =0.1.0,...

@intesso/scratch-paint (0.2.0), @wdr-data/scratch-render (0.1.0-prerelease.20180918201144-fixed-1) +13 more potentially affected by CVE-2020-7750 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.2.0-prerelease.20201016121710)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =0.0.1, =0.1.0-prerelease.2019-05-26T04-34Z, =0.2.0-prerelease.20181120191526, =0.1.0-prerelease.20210117145449, =0.1.0-prerelease.20200903194013, =0.2.0-prerelease.20180531225024, =0.1.0-prerelease.20180531210700, =0.1.0,...

GHSA-J977-G5VJ-J27G Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...

Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...