CVE-2026-46489

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator can upload an SVG file containing embedded JavaScript. This script is base64-encoded and injected unescaped into eve...

Malware in base64-javascript

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in base64-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d462341360820f858bf3682fcc3be6c7b9407fc903061b5b1ad70b88b81e9969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1468 Malicious code in base64-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d462341360820f858bf3682fcc3be6c7b9407fc903061b5b1ad70b88b81e9969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...