Malicious code in @cdh-data-portal-theme/build (npm)

--- -= Per source details. Do not edit below this line.=-...

USN-7081-1 golang-1.22 vulnerabilities

It was discovered that the Go net/http module did not properly handle responses to requests with an "Expect: 100-continue" header under certain circumstances. An attacker could possibly use this issue to cause a denial of service. CVE-2024-24791 It was discovered that the Go parser module did not...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Go vulnerabilities (USN-7081-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7081-1 advisory. It was discovered that the Go net/http module did not properly handle responses to requests with an Expect: 100-continue header...

Ubuntu: Security Advisory (USN-7081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malware in inf-build-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1486 Malicious code in inf-build-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 033fc49e1c2258614dc2c2a1b849039e2cea7095fb6f4a4b95ccb8bde9955df0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3810 Malicious code in inf-build-module-prefixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd186801cc9597497d0a1a58eac26e38c07835e160ba406f73c68441be5e5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in inf-build-module-prefixer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@lukeed/bongo (>=0.0.1, <=0.0.13), @novivia/build-module (>=0.3.0, <=0.5.3) +3 more potentially affected by CVE-2021-23784 via tempura (>=0.0.8, <=0.3.2)

tempura NPM version =0.0.8, =0.0.1, =0.3.0, =0.6.0, =0.0.1, =3.4.0, =4.12.3 Source cves: CVE-2021-23784 Source advisory: GHSA-W4V7-HWX7-9929...

@lukeed/bongo (>=0.0.1, <=0.0.13), @novivia/build-module (>=0.3.0, <=0.5.3) +3 more potentially affected by CVE-2021-23784 via tempura (>=0.0.8, <=0.3.2)

tempura NPM version =0.0.8, =0.0.1, =0.3.0, =0.6.0, =0.0.1, =3.4.0, =4.12.3 Source cves: CVE-2021-23784 Source advisory: MEND:CVE-2021-23784...