Malicious code in google-websockets-deneb-enif (npm)

The package google-websockets-deneb-enif was found to contain malicious code...

MAL-2025-15201 Malicious code in avior-antares-adonis-websockets (npm)

The package avior-antares-adonis-websockets was found to contain malicious code...

MAL-2025-27682 Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm)

The package nodejs-prettier-plugin-markdown-terraforming-websockets was found to contain malicious code...

MAL-2025-30822 Malicious code in publish-superagent-websockets-gulp (npm)

The package publish-superagent-websockets-gulp was found to contain malicious code...

MAL-2025-15696 Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

Malicious code in websockets-pm2-standard-carpo (npm)

The package websockets-pm2-standard-carpo was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

MAL-2025-17402 Malicious code in command-avior-websockets-jekyll (npm)

The package command-avior-websockets-jekyll was found to contain malicious code...

MAL-2025-20089 Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

MAL-2025-38189 Malicious code in vega-hermes-websockets-slides (npm)

The package vega-hermes-websockets-slides was found to contain malicious code...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

CVE-2024-51775

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended ...

Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets. When using a terminal interpreter i.e. %sh.terminal in an Apache Zeppelin notebook, a WebSocket server is spawned on a random port. This server does not implement an origin check and as such is...

GHSA-XG8J-J6VP-6H5W Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

CVE-2024-51775

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...