MAL-2025-27682 Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm)

The package nodejs-prettier-plugin-markdown-terraforming-websockets was found to contain malicious code...

Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in websockets-pm2-standard-carpo (npm)

The package websockets-pm2-standard-carpo was found to contain malicious code...

MAL-2025-15696 Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

MAL-2025-34750 Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

MAL-2025-15201 Malicious code in avior-antares-adonis-websockets (npm)

The package avior-antares-adonis-websockets was found to contain malicious code...

MAL-2025-30822 Malicious code in publish-superagent-websockets-gulp (npm)

The package publish-superagent-websockets-gulp was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

MAL-2025-17402 Malicious code in command-avior-websockets-jekyll (npm)

The package command-avior-websockets-jekyll was found to contain malicious code...

Malicious code in command-avior-websockets-jekyll (npm)

The package command-avior-websockets-jekyll was found to contain malicious code...

Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

CVE-2024-51775

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended ...

GHSA-XG8J-J6VP-6H5W Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets. When using a terminal interpreter i.e. %sh.terminal in an Apache Zeppelin notebook, a WebSocket server is spawned on a random port. This server does not implement an origin check and as such is...

Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

CVE-2024-51775

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

CVE-2024-51775 Apache Zeppelin: Command Injection via CSWSH

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended...

Apache Zeppelin 安全漏洞

Apache Zeppelin is an open source web-based laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. A security vulnerability exists in Apache Zeppelin versions prior to 0.11.1 through 0.12.0, which stems from a lack of...