Malicious code in vue-docs-image-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10c76d7710a87c32b1fea8e22c853c2588cf7cf4083a31753789fe69c193903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6991 Malicious code in vue-docs-image-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10c76d7710a87c32b1fea8e22c853c2588cf7cf4083a31753789fe69c193903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7103 Malicious code in webpack-vue-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-vue-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bbs-go cross-site scripting vulnerability

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...

MAL-2022-867 Malicious code in ado-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd009dde2794c465f22294ea7b9405a3773dfef317eefe05126917bbbcdabbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ado-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd009dde2794c465f22294ea7b9405a3773dfef317eefe05126917bbbcdabbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2021-30074 via docsify (>=4.2.1, <=4.9.1)

docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2021-30074 Source advisory: OSV:GHSA-5H7X-68WJ-JHWC...

GHSA-9WXJ-37P8-49FF Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Woodpecker 跨站脚本漏洞

Woodpecker is a community branch of the Drone CI system. A cross-site scripting vulnerability exists in versions prior to Woodpecker 0.15.1, which stems from a missing escape in web/src/components/repo/build/BuildLog.vue. An attacker could exploit this vulnerability to execute JavaScript code on...

Element Plus 跨站脚本漏洞

Element Plus is an open source Vue.js 3 UI library from the China Element Plus organization. A cross-site scripting vulnerability exists in Element Plus version 2.0.5, which stems from a lack of filtering and escaping of el-table-column in the application...

GHSA-9WRV-G75H-8CCC Improper Access Control in Shopware

Shopware 6 is an open commerce platform based on Symfony Framework and Vue and supported by a worldwide community and more than 1.500 community extensions. Permissions set to sales channel context by admin-api are still useable within normal user session. We recommend updating to the current...

Improper Access Control in Shopware

Shopware 6 is an open commerce platform based on Symfony Framework and Vue and supported by a worldwide community and more than 1.500 community extensions. Permissions set to sales channel context by admin-api are still useable within normal user session. We recommend updating to the current...

CVE-2022-24872

Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security...

Design/Logic Flaw

Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security...

CVE-2022-24872 Improper Access Control in shopware

Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security...

CVE-2022-24872 Improper Access Control in shopware

Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3, corresponding security...

CVE-2022-24872

Shopware CVE-2022-24872 is an improper access‑control issue in the admin-api where permissions set to the sales channel context can be used within a normal user session. Affects Shopware platform (Symfony/Vue) across affected releases; remediation is to update to version 6.4.10.1. For 6.1–6.3, se...

CVE-2022-24871

Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3...