CVE-2026-46489

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator can upload an SVG file containing embedded JavaScript. This script is base64-encoded and injected unescaped into eve...

Malicious code in base64-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d462341360820f858bf3682fcc3be6c7b9407fc903061b5b1ad70b88b81e9969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1468 Malicious code in base64-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d462341360820f858bf3682fcc3be6c7b9407fc903061b5b1ad70b88b81e9969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...