Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2026/09/02 9:21 p.m.•5 views

Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-1099

Malicious code in bioql PyPI...

8.8CVSS7.2AI score0.00692EPSS
SaveExploits0References5
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•15 views

MAL-2025-15231 Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•13 views

Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/03/04 9:33 a.m.•16 views

MAL-2025-2092 Malicious code in aws-ui-component-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dccf55adacf1d8f07bd95ddca3f474ac9b53ffa48455ff2cbb23352bd0055add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/03/04 9:33 a.m.•2 views

Malware in aws-ui-component-select

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2022/02/24 8:15 p.m.•44 views

CVE-2022-24709

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS0.00692EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/24 8:15 p.m.•30 views

Design/Logic Flaw

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

4.3CVSS6.6AI score0.00692EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/02/24 7:55 p.m.•12 views

CVE-2022-24709 Cross site scripting in @awsui/components-react

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS7.7AI score0.00692EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/02/24 12:00 a.m.•17 views

components-react

components-react is a set of React components that help create intuitive, responsive and accessible user experiences for web applications. A cross-site scripting vulnerability exists in versions prior to @awsui/components-react 3.0.367 that could allow javascript injection...

8.8CVSS6.8AI score0.00692EPSS
SaveExploits0References4
Rows per page
Query Builder