Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

New research has found that organizations in various sensitive sectors, including governments, telecoms, and critical infrastructure, are pasting passwords and credentials into online tools like JSONformatter and CodeBeautify that are used to format and validate code. Cybersecurity company...

EUVD-2022-40230

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-37609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js. CVE-2022-37609 Note that Nessus relies on the presence...

MAL-2025-4510 Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in styled-beautify-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3060 Malicious code in styled-beautify-components (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to arbitrary code execution due to [CVE-2022-37609]

Summary Node.js js-beautify is present in the IBM App Connect Enterprise Certified Container DesignerAuthoring operand image. A DesignerAuthoring operand may be vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in Node.js...

Prototype Pollution

js-beautify is vulnerable to prototype pollution. An attacker is able to pollute any future object creations by passing a crafted malicious payload to mergeOpts function in options.js via the name variable...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

Code injection

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

UBUNTU-CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

js-beautify 安全漏洞

js-beautify is beautify-web open source a javascript beautifier . A security vulnerability exists in beautify-web js-beautify version 1.13.7, which stems from the discovery of a contained prototype contamination vulnerability via the name variable in options.js...

CVE-2022-37609

CVE-2022-37609 affects the Node.js/js-beautify component in beautify-web, specifically version 1.13.7, due to a prototype pollution flaw in options.js via the name variable. Multiple sources corroborate a high-severity (CVSS v3.1: 9.8) exposure with network attack vector, no user interaction, and...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

PT-2022-24025 · Unknown · Js-Beautify

Name of the Vulnerable Software and Affected Versions: js-beautify version 1.13.7 Description: The issue is related to a prototype pollution vulnerability. It affects the js-beautify library, specifically via the name variable in options.js. Recommendations: For js-beautify version 1.13.7, consid...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...