3416 matches found
OSV-2025-688 Security exception in java.base/java.util.Arrays.copyOfRange
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=440841513 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...
Linux Distros Unpatched Vulnerability : CVE-2018-7738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandle...
CVE-2025-9308: Inefficient Regular Expression Complexity
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in WebhookUtil.java. An attacker can access or manipulate internal server resources by sending crafted requests that are processed by the server. Remediation Upgrade org.apache.eventmesh:eventmesh-runtim...
Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java
Server-Side Request Forgery SSRF in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch, which fixes th...
GHSA-HF86-8X8V-H7VC Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java
Server-Side Request Forgery SSRF in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch, which fixes th...
CVE-2024-39954
CWE-918 Server-Side Request Forgery SSRF in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch , which...
CVE-2024-39954 Apache EventMesh Runtime: SSRF
CWE-918 Server-Side Request Forgery SSRF in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch , which...
CVE-2024-39954
Apache EventMesh is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) in the eventmesh-runtime module, specifically within the WebhookUtil.java file. This flaw affects systems running on Windows, Linux, and macOS . An attacker can exploit this vulnerability to abuse server functionalit...
Malicious code in api-util (npm)
The package api-util was found to contain malicious code...
Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
MAL-2025-15191 Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
Malicious code in dynseg-util (npm)
The package dynseg-util was found to contain malicious code...
Malicious code in ethers-util (npm)
The package ethers-util was found to contain malicious code...
MAL-2025-14648 Malicious code in api-util (npm)
The package api-util was found to contain malicious code...
Malicious code in avalon-util-plugin (npm)
The package avalon-util-plugin was found to contain malicious code...
Malicious code in fn-util (npm)
The package fn-util was found to contain malicious code...
MAL-2025-19892 Malicious code in ethers-util (npm)
The package ethers-util was found to contain malicious code...