Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-case-dispute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11217 Oauth-server-container: oauth-server-container logs client secret in debug level

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

CVE-2024-11217

CVE-2024-11217 affects the OAuth-server (including oauth-server-container). The vulnerability causes the OAuth2 client secret to be logged when the logLevel is set to Debug or higher for OIDC/GitHub/GitLab/Google IDP logins. Impact is exposure of OAuth2 client secrets via logs (confidentiality ri...

CVE-2024-11217 Oauth-server-container: oauth-server-container logs client secret in debug level

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

Malicious code in pvct-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97125a9e23577624ce75d1c18f9ef230f8dee8ab03e9122e21afcadedbf22b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16834

Name of the Vulnerable Software and Affected Versions OAuth-server affected versions not specified Description A weakness was found in the OAuth-server, where it logs the OAuth2 client secret when the logLevel is set to Debug or higher for certain login options, including OIDC, GitHub, GitLab, an...

CVE-2024-11217

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

Malicious code in wixdevpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233144e1f7875e1d1028b6101f34a5191e04312b9190d4be6ebcd51fee02c497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10694 Malicious code in babel-plugin-istanbul-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b297d163ed50548e4f9a48bd5b04af57e58f063fa67d58480f857b63b9ee0bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logjs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db9ce61ae79bc8f972d6275198581d1924f054967dfead3abccc970d1b77daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10691 Malicious code in axios-cookiesupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55368b5538a85341f64d31000a87573fb8c111b30fee01091ef7040841955a04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mkt-worker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8971f053ecded5e4c81fa201da46f7838e79cf6635808be72fa828ae029a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in markservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967b4b4c0264a9fff8d309834b2a12350b0db8f50f86f487903ce1556d628d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in markomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77eccdef0d97ddaef12d7b6d994f078943e26b68cb1dbf79615d0a18035b96ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in magic-umi-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4f026691827b0fc765f9ef1d86d699d1044f815fbe81787619c55de35ba765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the containers-common library in the Golang programming language arises from improper resolution of references before accessing files. This allows attackers to gain access to confidential information.

The vulnerability of the containers-common library in the Golang programming language is related to improper resolution of references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to confidential information by using symbolic references, by mounting...

Malicious code in sazz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d92dbc3fe418eda55594a9daf2e211b0d4595e4d8eaa8559e9c430e20995eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...