693 matches found
CVE-2026-34778
Electron: Service worker spoof IPC replies flaw allows a session service worker to spoof internal IPC replies used by webContents.executeJavaScript, causing the main-process promise to resolve with attacker-controlled data. Affected only if service workers are registered and the result of execute...
EUVD-2026-18955
Electron: Service worker can spoof executeJavaScript IPC replies...
PT-2026-30008
Impact A service worker running in a session could spoof reply messages on the internal IPC channel used by webContents.executeJavaScript and related methods, causing the main-process promise to resolve with attacker-controlled data. Apps are only affected if they have service workers registered...
PT-2026-38151
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An inappropriate implementation in ServiceWorker allows an attacker to inject arbitrary scripts or HTML Universal Cross-Site Scripting - UXSS, a vulnerability where an attacker can...
PT-2026-42235
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179 Description Insufficient policy enforcement in the Service Worker allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script...
Orval Mock Generation Code Injection via const
I am reporting a code injection vulnerability in Orval’s mock generation pipeline affecting @orval/mock in both the 7.x and 8.x series. This issue is related in impact to the previously reported enum x-enumDescriptions https://github.com/advisories/GHSA-h526-wf6g-67jv, but it affects a different...
MiracleLinux 4 : thunderbird-78.7.0-1.0.1.AXS4 (AXSA:2021-1432:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1432:01 advisory. Mozilla: Cross-origin information leakage via redirected PDF requests CVE-2021-23953 Mozilla: Type confusion when using logical assignment operators...
Google Chrome < 46.0.2490.71 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 46.0.2490.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 201510stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers...
Google Chrome < 4.6.85.23 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 4.6.85.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 201510stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to...
Google Chrome < 46.0.2490.71 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 46.0.2490.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 201510stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers t...
Malicious code in store-service-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...
EUVD-2025-37102
Malicious code in epic-service-worker npm...
MAL-2025-49239 Malicious code in store-service-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...
MAL-2025-49191 Malicious code in epic-service-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...
Malicious code in epic-service-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...
EUVD-2025-37054
Malicious code in store-service-worker npm...
EUVD-2018-12646
Malware in sbrugna...
EUVD-2019-18115
Malware in sbrugna...