133 matches found
Malware in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-17962 Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711a60021cd8fa5baa56abf71a1eb5e317d5fada82562f8bb1c413542b587ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711a60021cd8fa5baa56abf71a1eb5e317d5fada82562f8bb1c413542b587ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.6)
langchain-core PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - beehive-ai =0.0.1, =0.1.0, =0.0.3, =0.0.11 - rezolve-ai-ingestion 0.1.4 Source cves: CVE-2026-26013 Source advisory:...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (0.1.2) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.1)
langchain-openai PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beehive-ai =0.0.1, =0.0.3, =0.1.0, =0.0.3, =0.0.10 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (0.1.2) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.1)
langchain-openai PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beehive-ai =0.0.1, =0.0.3, =0.1.0, =0.0.3, =0.0.10 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-34070 via langchain-core (0.3.6)
langchain-core PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - beehive-ai =0.0.1, =0.1.0, =0.0.3, =0.0.11 - rezolve-ai-ingestion 0.1.4 Source cves: CVE-2026-34070 Source advisory:...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-34070 via langchain-core (0.3.6)
langchain-core PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - beehive-ai =0.0.1, =0.1.0, =0.0.3, =0.0.11 - rezolve-ai-ingestion 0.1.4 Source cves: CVE-2026-34070 Source advisory:...
beehive-ai (>=0.0.1, <=0.0.2), documentgraph (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.6)
langchain-core PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - beehive-ai =0.0.1, =0.1.0, =0.0.3, =0.0.11 - rezolve-ai-ingestion 0.1.4 Source cves: CVE-2026-26013 Source advisory:...
CVE-2022-50910
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...
CVE-2022-50910
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...
CVE-2022-50910 Beehive Forum - Account Takeover
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...
CVE-2022-50910
Beehive Forum 1.5.2 has a host header injection flaw in the Forgot Password flow. The vulnerability lets an attacker inject a malicious Host header to intercept password reset tokens and change the victim’s password without direct authentication. Root cause: improper host header handling in the p...
CVE-2022-50910 Beehive Forum - Account Takeover
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...
CVE-2022-50910: Weak Password Recovery Mechanism for Forgotten Password
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct...
Beehive Forum Authorization Issues Vulnerabilities
Beehive Forum is an open source forum system from Beehive. An authorization issue vulnerability exists in Beehive Forum version 1.5.2, which stems from a host header injection in the Forgot Password feature that could allow an attacker to intercept a password reset token and change the account...
EUVD-2007-6209
Malware in sbrugna...