525 matches found
Malicious code in cascade-infinity-ahh628-project (npm)
The package cascade-infinity-ahh628-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-ezj8c-t4nrs-moonstone-project (npm)
The package cascade-ezj8c-t4nrs-moonstone-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-evergreen-ihk025-project (npm)
The package cascade-evergreen-ihk025-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-eqpzg-cnlbb-echo-project (npm)
The package cascade-eqpzg-cnlbb-echo-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-star-cla341-project (npm)
The package cascade-star-cla341-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-albatross-hxk006-project (npm)
The package cascade-albatross-hxk006-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-62nar-p4wjf-frost-project (npm)
The package cascade-62nar-p4wjf-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-paradise-axa363-project (npm)
The package cascade-paradise-axa363-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-emerald-clf852-project (npm)
The package cascade-emerald-clf852-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-yearn-mhs812-project (npm)
The package cascade-yearn-mhs812-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-jasmine-pst615-project (npm)
The package cascade-jasmine-pst615-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in asteroid-cascade-lik762-project (npm)
The package asteroid-cascade-lik762-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ash-5n1ax-68m0q-cascade-project (npm)
The package ash-5n1ax-68m0q-cascade-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in adorn-cascade-wpn602-project (npm)
The package adorn-cascade-wpn602-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in acorn-cascade-rws647-project (npm)
The package acorn-cascade-rws647-project was found to contain malicious code. --- Credit: OpenSSF source...
django-shop (1.2.4), djangocms-algolia (>=0.1.0.0, <=1.3.2.0) +8 more potentially affected by CVE-2026-54624 via django-cms (3.11.3)
django-cms PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-shop 1.2.4 - djangocms-algolia =0.1.0.0, =1.0.0, =1.0.0, =0.2.0.0, =0.0.0.1, =1.0.0.0 - djangoshop-gestpay 0.1.0 - djangoshop-wspay...
CVE-2026-72596
A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to...
CVE-2026-72596 Ghost Foundation Ghost - Broken Access Control
A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to...
CVE-2025-14779
The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...
CVE-2025-14779
The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...