Malicious code in test-mlw2-afire-suber (npm)

The package test-mlw2-afire-suber was found to contain malicious code...

MAL-2025-34843 Malicious code in test-mlw2-afire-suber (npm)

The package test-mlw2-afire-suber was found to contain malicious code...

Malicious code in @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer (npm)

The package @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer was found to contain malicious code...

Relative Path Traversal in afire serve_static

Impact This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible. Patches The issue has been fixed in afire 1.1.0. If you can, just update to the...

afire_compress (>=0.1.0, <=0.1.1-alpha) potentially affected by unknown CVE via afire (0.3.0)

afire CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on afire and may be impacted: - afirecompress =0.1.0, =0.1.1-alpha Source cves: unknown CVE Source advisory: OSV:GHSA-3227-R97M-8J95...

Relative Path Traversal in afire serve_static

This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible...