Malicious code in bonfire-dragon-xjp200-project (npm)

The package bonfire-dragon-xjp200-project was found to contain malicious code...

MAL-2025-40374 Malicious code in yawn-bonfire-raf904-project (npm)

The package yawn-bonfire-raf904-project was found to contain malicious code...

MAL-2025-29582 Malicious code in prairie-bonfire-eao158-project (npm)

The package prairie-bonfire-eao158-project was found to contain malicious code...

MAL-2025-15948 Malicious code in bonfire-pinnacle-byu239-project (npm)

The package bonfire-pinnacle-byu239-project was found to contain malicious code...

MAL-2025-40322 Malicious code in yard-bonfire-ccl955-project (npm)

The package yard-bonfire-ccl955-project was found to contain malicious code...

MAL-2025-29001 Malicious code in pebble-bonfire-ajc528-project (npm)

The package pebble-bonfire-ajc528-project was found to contain malicious code...

MAL-2025-24551 Malicious code in kite-bonfire-gvl276-project (npm)

The package kite-bonfire-gvl276-project was found to contain malicious code...

MAL-2025-15945 Malicious code in bonfire-glacier-poe104-project (npm)

The package bonfire-glacier-poe104-project was found to contain malicious code...

MAL-2025-39711 Malicious code in xerox-bonfire-nas550-project (npm)

The package xerox-bonfire-nas550-project was found to contain malicious code...

MAL-2025-15944 Malicious code in bonfire-everest-ede478-project (npm)

The package bonfire-everest-ede478-project was found to contain malicious code...

MAL-2025-18967 Malicious code in dune-bonfire-nvp542-project (npm)

The package dune-bonfire-nvp542-project was found to contain malicious code...

MAL-2025-15943 Malicious code in bonfire-dragon-xjp200-project (npm)

The package bonfire-dragon-xjp200-project was found to contain malicious code...

Bonfire Photo Editor Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bonfire Photo Editor Pro published at the 'play' market has multiple vulnerabilities...

bonfire 0.7 /install.php 信息泄露漏洞

No description provided by source...

XSS vulnerability in atlassian-bonfire-plugin pagination

There is an XSS vulnerability present in the pagination of Bonfire sessions. Steps to reproduce: 1. Create a user with username '" onmouseover="alert4321" blah="' without the single quotes 2. Create at least 21 test sessions owned by this user 3. Visit the user's profile page and click on the tes...

Password Reset doesn't recognise spaces in usernames

When I enter my new password and submit the page, it responds with a message about the username 'philip', but my username is 'philip widan'. There was a similar issue with the Bonfire plugin, which required an upgrade to JIRA v5 to resolve. The URL I clicked on to get to the password reset page...

Password Reset doesn't recognise spaces in usernames

When I enter my new password and submit the page, it responds with a message about the username 'philip', but my username is 'philip widan'. There was a similar issue with the Bonfire plugin, which required an upgrade to JIRA v5 to resolve. The URL I clicked on to get to the password reset page...

Password Reset doesn't recognise spaces in usernames

When I enter my new password and submit the page, it responds with a message about the username 'philip', but my username is 'philip widan'. There was a similar issue with the Bonfire plugin, which required an upgrade to JIRA v5 to resolve. The URL I clicked on to get to the password reset page...