[SECURITY] Fedora 36 Update: python-notebook-6.4.11-3.fc36

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

Malicious code in qiwi-widgets-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5918b2e5d3410ab7cb968a3b16aef1baba54bbccdea5db15edf8b8ea63f0229f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5546 Malicious code in qiwi-widgets-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5918b2e5d3410ab7cb968a3b16aef1baba54bbccdea5db15edf8b8ea63f0229f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in relap-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8872e580af7f46dda42c551780140c1f22a16413c6995b881e33f68a5596b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5738 Malicious code in relap-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8872e580af7f46dda42c551780140c1f22a16413c6995b881e33f68a5596b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7367 Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ringcentral-js-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a945280fbb86a94c48945655c54a4c0e8a086449b740490e8167ac97f1de67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5807 Malicious code in ringcentral-js-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a945280fbb86a94c48945655c54a4c0e8a086449b740490e8167ac97f1de67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in widgets-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0d7136253d49aca8073d2094c4733e7491db9517189c6c7606c6a6ee7c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7146 Malicious code in widgets-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0d7136253d49aca8073d2094c4733e7491db9517189c6c7606c6a6ee7c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

aiidalab-widgets-base (>=1.3.4 <=2.0.0a1), appyter (>=0.18.3 <=0.18.11) +50 more potentially affected by CVE-2022-29241 via jupyter-server (>=0.0.5 <=1.16.0)

jupyter-server PYPI version =0.0.5, =1.3.4, =0.18.3, =0.0.0, =0.1.0rc1, =0.0.1.post7, =0.1.2, =1.2.0, =0.0.0, =0.0.1.dev7, =0.1.7, =0.1.1.10, =0.1.6.2, =0.3.0, =0.6.0 and more Source cves: CVE-2022-29241 Source advisory: OSV:PYSEC-2022-211...

Design/Logic Flaw

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

Tuleap 安全漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability exists in versions prior to Tuleap 13.7.99.239 that stems from Tuleap failing to...

CVE-2022-24896

CVE-2022-24896 affects Tuleap versions prior to 13.7.99.239. The vulnerability stems from improper authorization checks when displaying content in the Tracker Report Renderer and Chart widgets, allowing an attacker to disclose the name of trackers and the fields used in reports. Impact is informa...

CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

Malicious code in survey-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2112bbae1e65790567a0ca80131bd2fef3b3ba74e669e0dcbc8f409d3291fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6362 Malicious code in survey-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2112bbae1e65790567a0ca80131bd2fef3b3ba74e669e0dcbc8f409d3291fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Magento XML Injection vulnerability in the Widgets Update Layout

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution...

GHSA-3X9X-VHQJ-CV27 Magento XML Injection vulnerability in the Widgets Update Layout

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution...