Security Bulletin: IBM Cloud Pak for Data is vulnerable to arbitrary code execution during compilation due to traverse ( CVE-2023-45133 )

Summary Package traverse is used by IBM Cloud Pak for Data. CVE-2023-45133. Vulnerability Details CVEID:CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a flaw in the path.evaluateor path.evaluateTruthy. By using a specially crafted...

MAL-2024-7930 Malicious code in babel-preset-sofi-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f98a5f8b5f0da82a5cd8832e176ca57effe972fad5d0ef298183a66d9a60183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the org-babel-execute function: latex() in the text editor EMACS, allowing an attacker to execute arbitrary code

The vulnerability of the org-babel-execute:latex function in the text editor EMACS is related to the improper elimination of special elements used in the command. Exploiting this vulnerability may allow an attacker to execute arbitrary code...

OPENSUSE-SU-2024:14127-1 python310-Babel-2.14.0-1.5 on GA media

These are all security issues fixed in the python310-Babel-2.14.0-1.5 package on the GA media of openSUSE Tumbleweed...

Malicious code in npm_package_babel_presets_1_0 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2771 Malicious code in npm_package_babel_presets_1_0 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mall-front-babel-directive (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2647 Malicious code in mall-front-babel-directive (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in babel-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1802 Malicious code in babel-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1801 Malicious code in @plangrid-private/babel-preset-react-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @golden-stack/babel-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1803 Malicious code in @golden-stack/babel-web (npm)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:11602-1 python36-Babel-2.9.1-3.1 on GA media

These are all security issues fixed in the python36-Babel-2.9.1-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 : python27:2.7 (ELSA-2024-2987)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2987 advisory. - Fix CVE-2021-20095 Resolves: rhbz1955615 - Fix CVE-2019-6446 - Fix CVE-2014-1858, CVE-2014-1859: 1062009, 1062359 - Security fix for CVE-2022-48560...

bit-loader 安全漏洞

bit-loader is a framework for building module loaders by the individual developer Miguel Castillo. A security vulnerability exists in bit-loader-babel version v.10.0.3, which originated from a vulnerability that allows an attacker to execute arbitrary code via the M function e parameter in index....

RHEL 6 : python-babel (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrar...

RHEL 7 : python-babel (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrar...

RHEL 8 : python27:2.7 (RHSA-2023:5990)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5990 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types...

Malicious code in babel-preset-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...