EUVD-2026-31944

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invoke without checking for a valid session. Four action methods in BoilerPlateConfig perform no local...

Malicious code in twk-boilerplate-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e55b9fb271d1d1fcc3ac27783bc95ed7cbce8762d35cd7f2635490e25b9263b The OpenSSF Package Analysis project identified 'twk-boilerplate-template' @ 1.0.1 npm as malicious. It is considered malicious because: - The...