MAL-2025-29364 Malicious code in planetology-mutation-boson-warp (npm)

The package planetology-mutation-boson-warp was found to contain malicious code...

MAL-2025-15620 Malicious code in betelgeuse-phenomic-warp-kuiperbelt (npm)

The package betelgeuse-phenomic-warp-kuiperbelt was found to contain malicious code...

MAL-2025-14978 Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm)

The package astrochemistry-warp-non-blocking-thermochronology was found to contain malicious code...

Malicious code in nebula-warp-testcafe-impulse (npm)

The package nebula-warp-testcafe-impulse was found to contain malicious code...

Malicious code in webpack-phoebe-warp-jwt (npm)

The package webpack-phoebe-warp-jwt was found to contain malicious code...

MAL-2025-27526 Malicious code in nightwatch-steganography-hapi-warp (npm)

The package nightwatch-steganography-hapi-warp was found to contain malicious code...

MAL-2025-39880 Malicious code in xml-warp-magellan-mira (npm)

The package xml-warp-magellan-mira was found to contain malicious code...

MAL-2025-29367 Malicious code in planetology-warp-airbnb-norma (npm)

The package planetology-warp-airbnb-norma was found to contain malicious code...

MAL-2025-17397 Malicious code in comet-xenos-cordelia-warp (npm)

The package comet-xenos-cordelia-warp was found to contain malicious code...

MAL-2025-27187 Malicious code in nebula-warp-testcafe-impulse (npm)

The package nebula-warp-testcafe-impulse was found to contain malicious code...

MAL-2025-38782 Malicious code in warp-postcss-loader-jest-cosmicsilence (npm)

The package warp-postcss-loader-jest-cosmicsilence was found to contain malicious code...

MAL-2025-32896 Malicious code in sedimentology-xo-puppeteer-warp (npm)

The package sedimentology-xo-puppeteer-warp was found to contain malicious code...

The vulnerability of Cloudflare WARP VPN service for the macOS operating system, related to insecure privilege management. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level.

The vulnerability of Cloudflare WARP VPN service for macOS relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

ZK-SERIES: Privacy-Preserving Authentication Using Temporal Biometric Data

Biometric authentication relies on physiological or behavioral traits that are inherent to a user, making them difficult to lose, forge or forget. Biometric data with a temporal component enable the following authentication protocol: recent readings of the underlying biometrics are encoded as tim...

CVE-2025-0651

Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will...

CVE-2023-0654

Due to a misconfiguration, the WARP Mobile Client 6.29 for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on...

CVE-2023-0652

Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer MSI of WARP Client for Windows = 2022.12.582.0 allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As...

CVE-2023-0238

Due to lack of a security policy, the WARP Mobile Client =6.29 for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task...

CVE-2023-1862

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

CVE-2023-1412

An unprivileged non-admin user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows = 2022.12.582.0 to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks oplock and symbolic links which can both be creat...