Linux Distros Unpatched Vulnerability : CVE-2026-109149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to...

UBUNTU-CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

Memory Allocation with Excessive Size Value

Overview org.webjars.npm:js-beautify is a reformat and re-indent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as partly deobfuscate scripts processed by the npm package "javascript-obfuscator". Affected versions of this package are vulnerable to...

0303-lb3-paket (1.0.1), 1508-cli (>=1.0.0, <=1.0.6) +10917 more potentially affected by CVE-2026-109149 via js-beautify (>=0.2.3, <=2.0.3)

js-beautify NPM version =0.2.3, =1.0.0, =1.0.1, =1.0.2, =4.11.0, =4.13.7-rc4, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =1.9.0, =1.9.6 - @2060.io/semantic-release-react-native 1.11.0 and more Source cves: CVE-2026-109149 Source advisory: SNYK:JS-JSBEAUTIFY-20883334...

com.arextest:compare-sdk (>=0.2.18, <=0.2.22), com.gitee.zodiacstack.base:zodiac-base-sdk-net (1.7.1) +4 more potentially affected by CVE-2026-109149 via org.webjars.npm:js-beautify (1.14.7)

org.webjars.npm:js-beautify MAVEN version 1.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:js-beautify and may be impacted: - com.arextest:compare-sdk =0.2.18, =1.6.0, =1.1.4, =0.3.2, =0.5.6 Source cves: CVE-2026-109149 Source...

Memory Allocation with Excessive Size Value

Overview js-beautify is a reformat and re-indent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as partly deobfuscate scripts processed by the npm package "javascript-obfuscator". Affected versions of this package are vulnerable to Memory Allocation...

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-109149 beautifier js-beautify memory allocation

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-109149 beautifier js-beautify memory allocation

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-109149

The beautifier js-beautify library, in versions up to 1.15.1/2.0.3 , contains a vulnerability where an unknown function can be manipulated to cause uncontrolled memory allocation . This issue can be triggered via a remote attack , potentially leading to a denial of service or resource exhaustion....

CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-109149: Memory Allocation with Excessive Size Value

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

PT-2026-111373

Name of the Vulnerable Software and Affected Versions js-beautify versions 1.x through 1.15.1 js-beautify versions 2.x through 2.0.3 Description A weakness in an unknown function allows for remote execution of a manipulation that can lead to uncontrolled memory allocation, which occurs when a...

Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

New research has found that organizations in various sensitive sectors, including governments, telecoms, and critical infrastructure, are pasting passwords and credentials into online tools like JSONformatter and CodeBeautify that are used to format and validate code. Cybersecurity company...

EUVD-2022-40230

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-37609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js. CVE-2022-37609 Note that Nessus relies on the presence...

Malware in style-beautify-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4510 Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...