73 matches found
cartridge-braintree (>=1.2.1, <=1.2.2), mezzanine-seminars (>=0.1.0b1, <=1.7.1) potentially affected by CVE-2024-25169 via mezzanine (4.3.1)
mezzanine PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge-braintree =1.2.1, =0.1.0b1, =1.7.1 Source cves: CVE-2024-25169 Source advisory: OSV:PYSEC-2026-1627...
cartridge-braintree (>=1.2.1, <=1.2.2), mezzanine-seminars (>=0.1.0b1, <=1.7.1) potentially affected by CVE-2024-25170 via mezzanine (4.3.1)
mezzanine PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge-braintree =1.2.1, =0.1.0b1, =1.7.1 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...
MAL-2026-554 Malicious code in braintree-web-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72db908797ea8aa5f2c1c6d89356499ed46b677379648156e795ee3049b24b20 The package braintree-web-latest was found to contain malicious code. Source: ghsa-malware...
Malicious code in braintree-web-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72db908797ea8aa5f2c1c6d89356499ed46b677379648156e795ee3049b24b20 The package braintree-web-latest was found to contain malicious code. Source: ghsa-malware...
WordPress Payments Braintree For WooCommerce plugin authorization bypass vulnerability
WordPress Payments Braintree For WooCommerce plugin is a payment plugin designed specifically for WordPress websites, which supports payments done through both PayPal and credit cards. The WordPress Payments Braintree For WooCommerce plugin suffers from an authorization bypass vulnerability that...
CVE-2025-12903
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
CVE-2025-12903
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
CVE-2025-12903 Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
CVE-2025-12903 Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
CVE-2025-12903
The CVE-2025-12903 concerns the WordPress plugin Payment Plugins Braintree For WooCommerce. It affects all versions up to 3.2.78 and arises from a missing capability check on the REST endpoint wc-braintree/v1/3ds/vaulted_nonce, registered with permission_callback set to __return_true. This allows...
EUVD-2025-119984
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
WordPress Payment Plugins Braintree For WooCommerce plugin <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud vulnerability
Missing Authorization to Payment Token Exposure and Transaction Fraud vulnerability discovered by M Indra Purnama type5afe in WordPress Plugin Payment Plugins Braintree For WooCommerce versions = 3.2.78...
CVE-2025-12903: Authorization Bypass Through User-Controlled Key
The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaultednonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with...
WordPress plugin: Payment Plugins for Braintree in WooCommerce – Security vulnerabilities
WordPress Payments Braintree For WooCommerce plugin is a payment plugin designed specifically for WordPress websites, which supports payments done through both PayPal and credit cards. The WordPress Payments Braintree For WooCommerce plugin suffers from an authorization bypass vulnerability that...
Malicious code in react-paypal-braintree-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbf8ad1d1a557ec443c0f6ea58587954750259557188b27491cca78c7e9ea7 The package react-paypal-braintree-demo was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2022-1445
Malicious code in bioql PyPI...
Malicious Package
Overview braintree-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in braintree-sdk
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47014 Malicious code in braintree-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053257b915c2f0af69829fe05f32c4248f8dd415cf1a12103f297d5fbfe0574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in braintree-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053257b915c2f0af69829fe05f32c4248f8dd415cf1a12103f297d5fbfe0574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...