3 matches found
MAL-2026-13174 Malicious code in dolyame-ui-popover (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed3996792c8c70963eee2871d056f13b90e873087ff77be677c7cb359058b9f On require of the package, index.js loads ext.js which selects an OS/arch-specific endpoint and downloads a binary from hardcoded Cloudflare Workers...
EUVD-2026-20487
CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass...
PT-2026-31320
Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.4.0 Description The install route guard in CI4MS relies on a cache check and the existence of a .env file to prevent access to the setup wizard after installation. If the database is temporarily unreachable when th...