Lucene search
+L

31 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/25 6:43 a.m.10 views

Malicious code in bs58-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057e2e470e0bc9dbfd2ff37955c0c7d051cca944025b9d62c882ffc98c4434e5 Package [email protected] reproduces the name, README, repository URL cryptocoinjs/bs58, and exported API of the widely-used bs58 base58 encoding library...

6.2AI score
Exploits0References3
OSV
OSV
added 2026/06/25 6:43 a.m.5 views

MAL-2026-6448 Malicious code in bs58-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057e2e470e0bc9dbfd2ff37955c0c7d051cca944025b9d62c882ffc98c4434e5 Package [email protected] reproduces the name, README, repository URL cryptocoinjs/bs58, and exported API of the widely-used bs58 base58 encoding library...

6.2AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/25 6:42 a.m.8 views

Malicious code in base62-86x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811002816e7f72588c7c6540b088af5c44b8280574e43dbaeef4701fe377fe9f Package impersonates the legitimate base-x/base62 library by Daniel Cousens name base62-86x, homepage pointing at cryptocoinjs/base-x, identical sour...

6.1AI score
Exploits0References3
OSV
OSV
added 2026/06/25 6:42 a.m.6 views

MAL-2026-6446 Malicious code in base62-86x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811002816e7f72588c7c6540b088af5c44b8280574e43dbaeef4701fe377fe9f Package impersonates the legitimate base-x/base62 library by Daniel Cousens name base62-86x, homepage pointing at cryptocoinjs/base-x, identical sour...

6.1AI score
Exploits0References3
OSV
OSV
added 2026/02/02 8:42 a.m.10 views

BIT-DISCOURSE-2025-68934 Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.4AI score0.00235EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/29 9:21 p.m.8 views

CVE-2025-68934

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References1
NVD
NVD
added 2026/01/28 8:16 p.m.23 views

CVE-2025-68934

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS0.00235EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/28 7:19 p.m.8 views

EUVD-2025-206443

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:19 p.m.5 views

CVE-2025-68934

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 7:19 p.m.5 views

CVE-2025-68934 Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/28 7:19 p.m.29 views

CVE-2025-68934 Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS0.00235EPSS
Exploits0References1
OSV
OSV
added 2026/01/28 7:19 p.m.8 views

CVE-2025-68934 Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.11 views

Discourse security vulnerabilities

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email, and chat rooms. Vulnerabilities exist in versions of Discourse prior to 3.5.4, as well as versions before 2025.11.2, 2025.12.1, and 2026.1.0. These...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.10 views

PT-2026-5193

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.5.4 Discourse versions prior to 2025.11.2 Discourse versions prior to 2025.12.1 Discourse versions prior to 2026.1.0 Description Discourse is an open source discussion platform. Authenticated users can submit...

6.5CVSS5.8AI score0.00235EPSS
Exploits0References8
Snyk
Snyk
added 2025/11/24 3:27 a.m.3 views

Malicious Package

Overview base62-58x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
Exploits0References2
EUVD
EUVD
added 2025/11/24 3:27 a.m.2 views

EUVD-2025-198603

Malicious code in base62-58x npm...

6.6AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 3:27 a.m.7 views

Malicious code in base62-58x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329e19a0dfe372f18c65552e38f92a7cdaeae2c3bcfae8956d0a233a7885da88 The package base62-58x was found to contain malicious code. Source: ghsa-malware 5cd641e4e74a586087038295a99f8a1ee51c4b8ee02dd79da6aec94e39c39999 Any...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/11/24 3:27 a.m.4 views

MAL-2025-190624 Malicious code in base62-58x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329e19a0dfe372f18c65552e38f92a7cdaeae2c3bcfae8956d0a233a7885da88 The package base62-58x was found to contain malicious code. Source: ghsa-malware 5cd641e4e74a586087038295a99f8a1ee51c4b8ee02dd79da6aec94e39c39999 Any...

6.8AI score
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-1678

Malware in sbrugna...

5.5CVSS5.5AI score0.00465EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-2004

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00754EPSS
Exploits1References5
Rows per page
Query Builder