Denial Of Service (DoS)

lettersanitizer is vulnerable to denial of service. The vulnerability exists in the sanitizeHtml function in index.js as it does not properly handle css at-rules, allowing an attacker to crash the system via a malicious request...

CVE-2022-31103 Improper handling of CSS at-rules in lettersanitizer

lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is...

agnes-at-work.de Cross Site Scripting vulnerability OBB-2687972

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Improper handling of CSS at-rules in lettersanitizer

Impact All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is also at risk. Patches The problem has been patched in version 1.0.2...

GHSA-7R3R-GQ8P-V9JJ Improper handling of CSS at-rules in lettersanitizer

Impact All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is also at risk. Patches The problem has been patched in version 1.0.2...

MAL-2022-1454 Malicious code in bakabaka0010 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58cb4df396fbd6382b1e2cee32dfeb55c170a19a85629b60f9099cdd20507a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dentalstudioatrosslyn.com Cross Site Scripting vulnerability OBB-2662109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-555 Malicious code in @react-native-tscodegen/tslint-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2920511a6030acb6748a13dce7281e827a19c4c2e46c876e98887d428d3717 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7194 Malicious code in wm-grunt-module-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0144eb5a5379973adb84fce29202e3214f1bb5b65e7862c5865441b7b371d852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1833 Malicious code in cart-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2856576c4df628bed193bb9ad1d6223d7ac9f81f4e5592cfe77c531f9bfcf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-369 Malicious code in @jmfe/jm-jdshare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c571712f8527aa8540f22703eca787cdf1428dbf55294919e32cbc99bc2032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2820 Malicious code in eslint-plugin-mattermost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf92f85097940911b8524a51bd1220ae820097636f63b14b6486e52d6c5a8648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-141 Malicious code in @boosted-bounty/cassandra-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cd835d518bdb425d8c7f4c0c4c5a1c191dc13bfd9707d130db2cc56720aa3c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5174 Malicious code in p4clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9678afd54ab3f7e6694b9f548fbcc9b6956897f9eccb42f7d75c30839f53b614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5019 Malicious code in odata-discriminator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265529bcc74ef5bda572c9fde28874a801e8ce0977e3981dbc87bbc3f2df2500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3355 Malicious code in getseekrangegapsfromshakareferences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ea3647621127d634d34690e01a15a3722ce308cf04f8e3e04ab1714f4de163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-737 Malicious code in @wso-utils/localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f77d287bef6ac092e357b09a6f472733baf495b83ab79d891177287d1a741e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7069 Malicious code in web-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6072960685ef2154e26a6d650399a02fc1bc892374cd849d71cb5324f6ae4b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5716 Malicious code in record-data-encapsulation-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d53a7747d2d9554159637bd6865a3a6fe0253c1c5271e44d4fd75abc188889e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-972 Malicious code in amnotacat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91c5f96ff4a18966655d612d64c01c6ef1481b06910a5b61eb05356d2234bb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...