MAL-2025-18456 Malicious code in dione-blitz-indus-auth0 (npm)

The package dione-blitz-indus-auth0 was found to contain malicious code...

MAL-2025-14581 Malicious code in antares-jsonp-blitz-proteomics (npm)

The package antares-jsonp-blitz-proteomics was found to contain malicious code...

MAL-2025-15821 Malicious code in blitz-standard-mongoose-astrobiology (npm)

The package blitz-standard-mongoose-astrobiology was found to contain malicious code...

MAL-2025-20794 Malicious code in fornax-blitz-nuxtjs-spica (npm)

The package fornax-blitz-nuxtjs-spica was found to contain malicious code...

MAL-2025-37882 Malicious code in unuk-mesosphere-phoebe-blitz (npm)

The package unuk-mesosphere-phoebe-blitz was found to contain malicious code...

MAL-2025-17624 Malicious code in cosmology-cryovolcano-blitz-package (npm)

The package cosmology-cryovolcano-blitz-package was found to contain malicious code...

MAL-2025-35247 Malicious code in test-mlw2-dully-blitz-flown-flood (npm)

The package test-mlw2-dully-blitz-flown-flood was found to contain malicious code...

MAL-2025-16767 Malicious code in chakra-ui-blitz-blitz-webpack (npm)

The package chakra-ui-blitz-blitz-webpack was found to contain malicious code...

MAL-2025-36704 Malicious code in test-yakutsk-blitz-eleventy (npm)

The package test-yakutsk-blitz-eleventy was found to contain malicious code...

MAL-2025-32608 Malicious code in sadr-blitz-capella-grus (npm)

The package sadr-blitz-capella-grus was found to contain malicious code...

The vulnerability of the Blitz Identity Provider software lies in its insufficient limit on authentication attempts. This allows a perpetrator to register an email account to which they have no access and then verify it.

The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to register a mail account that they do not have access to and then verify it...

PT-2025-31116 · 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связанна с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, зарегистрировать учетную запись с почтой, к которой не имеет доступа и подтвердить ее...

The vulnerability of the Blitz Identity Provider software, related to deficiencies in the authentication process, allows a perpetrator to change the email address of a user’s account.

The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to change the email address of a user’s account remotely...

The vulnerability of the Blitz Identity Provider software lies in its insufficient limitation on the number of authentication attempts. This allows a hacker to associate any arbitrary email address with a user account.

The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to associate any email address with a user account...

The vulnerability of the Blitz Identity Provider software, related to incorrect configuration of access rights, allows a hacker to send an email with arbitrary text to the user’s assigned email address.

The vulnerability of the Blitz Identity Provider software is related to incorrect configuration of access rights. Exploiting this vulnerability could allow a malicious actor to send an email with arbitrary text to the user’s associated account...

The vulnerability of the Blitz Identity Provider software, related to deficiencies in authentication mechanisms, allows attackers to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

PT-2024-41443 · Ооо 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связана с некорректной настройкой правд доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, отправить на привязанную к аккаунту пользователя электронную почту письмо с произвольным текстом...

PT-2024-41442 · Ооо 'Реак Софт' · Blitz Identity Provider

Уязвимость программного обеспечения Blitz Identity Provider связана с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, привязать произвольную электронную почту к учетной записи пользователя...

The vulnerability of the Blitz Identity Provider software lies in its ability to redirect URL addresses, allowing a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the Blitz Identity Provider software relates to the possibility of redirecting URL addresses. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address by sending a specially crafted link...

@blitzjs/codemod (>=0.0.0-a78bd33-20230114151431 <=0.0.0-turbopack-20240403083540), @theapexlab/ra-data-blitz (=0.0.1) +1 more potentially affected by CVE-2022-23631 via blitz (>=0.0.0-a78bd33-20230114151431 <=0.43.0)

blitz NPM version =0.0.0-a78bd33-20230114151431, =0.0.0-a78bd33-20230114151431, =0.1.0, =0.1.5 Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...