PT-2025-45490

Name of the Vulnerable Software and Affected Versions CKeditor version 46.1.0 Angular version 18.0.0 Description A reflected cross-site scripting XSS issue exists that allows attackers to execute arbitrary code within a user’s browser. This is achieved by injecting a crafted payload. The...

CVE-2025-61261

A reflected cross-site scripting (XSS) vulnerability exists in CKeditor version 46.1.0 and Angular version 18.0.0 . The flaw allows an attacker to execute arbitrary code within a user's browser context by injecting a crafted payload . To remediate this issue, users should update CKeditor to a ver...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CKEditor 安全漏洞

CKEditor is an enterprise WYSIWYG editor from CKEditor open source. A security vulnerability exists in CKEditor version v46.1.0 and Angular version v18.0.0, which stems from reflective cross-site scripting and could lead to an attacker executing arbitrary code in a user's browser environment...

CVE-2025-61261: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

Malicious code in capes-template-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2 The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-37549

Malicious code in capes-template-angular npm...

MAL-2025-49332 Malicious code in capes-template-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2 The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in epic-angular-ui-codemirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475aba8f9dc17e38dcf35a7e5607ccc07a0b4e095aa0957ee57fdc75d0d4ee8d The package epic-angular-ui-codemirror was found to contain malicious code...

MAL-2025-49117 Malicious code in epic-angular-ui-codemirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475aba8f9dc17e38dcf35a7e5607ccc07a0b4e095aa0957ee57fdc75d0d4ee8d The package epic-angular-ui-codemirror was found to contain malicious code...

EUVD-2025-37176

Malicious code in epic-angular-ui-codemirror npm...

EUVD-2025-36885

Malicious code in geopost-angular-components npm...

Malicious Package

Overview geopost-angular-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in rxjs-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3493cee8ab4bb7f4b656ed430193cea7d26bd53c7c124c9eeda99cf31ef7f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview rxjs-angular is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36855

Malicious code in rxjs-angular npm...

MAL-2025-49039 Malicious code in rxjs-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3493cee8ab4bb7f4b656ed430193cea7d26bd53c7c124c9eeda99cf31ef7f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geopost-angular-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b519cc34afbb8ac8a6adcebfa4765a2553ad14947386e79821c5ad76ad67684a The package geopost-angular-components was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49087 Malicious code in geopost-angular-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b519cc34afbb8ac8a6adcebfa4765a2553ad14947386e79821c5ad76ad67684a The package geopost-angular-components was found to contain malicious code. Source: ghsa-malware...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...