MAL-2025-16781 Malicious code in change-object-path (npm)

The package change-object-path was found to contain malicious code...

Malicious code in change-object-path (npm)

The package change-object-path was found to contain malicious code...

Cross-Site Request Forgery (CSRF) in collectiveaccess/providence

Description I have found more endpoints which allow edit/duplicate were not protected from CSRF, the following endpoints are: 1: Edit Global Value in Pawtucket. 2: Change object type. 3: Duplicate object. 4: Duplicate items in the set and add to another set. Proof of Concept Via GET requests: 1...