@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +117 more potentially affected by CVE-2026-0540 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

EUVD-2021-22936

Malware in sbrugna...

Malicious code in aui-js (npm)

The package aui-js was found to contain malicious code...

MAL-2025-15041 Malicious code in aui-js (npm)

The package aui-js was found to contain malicious code...

CVE-2025-21117

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user...

PT-2025-5697

Name of the Vulnerable Software and Affected Versions: Dell Avamar versions 19.4 or later Description: The issue is related to an access token reuse vulnerability in the AUI, which could be exploited by a low-privileged local attacker to fully impersonate a user. Recommendations: For versions 19....

CVE-2025-21117: Operation on a Resource after Expiration or Release

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user...

Privilege escalation

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

CVE-2021-36316

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 are affected by an improper privilege management vulnerability in AUI. A malicious user with high privileges could disclose AUI information and perform unauthorized operations on AUI. The provided documents do not include deeper roo...

CVE-2021-36316: Improper Privilege Management

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

PT-2021-21218

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 18.2 through 19.4 Description The issue is related to improper privilege management in AUI, which could be exploited by a malicious user with high privileges. This could lead to the disclosure of AUI information...