Malicious code in emulate-boolean-info-enum-chi (npm)

The package emulate-boolean-info-enum-chi was found to contain malicious code...

MAL-2025-19635 Malicious code in emulate-boolean-info-enum-chi (npm)

The package emulate-boolean-info-enum-chi was found to contain malicious code...

MAL-2025-28204 Malicious code in old-throw-chi-boolean-slow (npm)

The package old-throw-chi-boolean-slow was found to contain malicious code...

MAL-2025-15341 Malicious code in balance-chi-decompress-chi-code (npm)

The package balance-chi-decompress-chi-code was found to contain malicious code...

Malicious code in balance-chi-decompress-chi-code (npm)

The package balance-chi-decompress-chi-code was found to contain malicious code...

Malicious code in old-throw-chi-boolean-slow (npm)

The package old-throw-chi-boolean-slow was found to contain malicious code...

MAL-2025-16974 Malicious code in chi-notify-info-theta-decode (npm)

The package chi-notify-info-theta-decode was found to contain malicious code...

MAL-2025-19882 Malicious code in eta-chi-socket-easy-module (npm)

The package eta-chi-socket-easy-module was found to contain malicious code...

MAL-2025-9865 Malicious code in @zalastax/nolb-_chi (npm)

The package @zalastax/nolb-chi was found to contain malicious code...

Malicious code in chi-notify-info-theta-decode (npm)

The package chi-notify-info-theta-decode was found to contain malicious code...

GO-2025-3770 Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi

Host header injection which leads to open redirect in RedirectSlashes in github.com/go-chi/chi...

Host Header Injection

github.com/go-chi/chi is vulnerable to host header injection. The vulnerability is due to improper validation of the Host header in the RedirectSlashes function, allowing an attacker to manipulate redirects...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to arbitrary external sites by manipulating the Host header in HTTP requests. Remediation Upgrade github.com/go-chi/chi/v5/middleware to version 5.2.2 or...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to arbitrary external sites by manipulating the Host header in HTTP requests. Remediation A fix was pushed into the master branch but not yet published...

GHSA-VRW8-FXC6-2R93 chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Summary The RedirectSlashes function in middleware/strip.go is vulnerable to host header injection which leads to open redirect. We consider this a lower-severity open redirect, as it can't be exploited from browsers or email clients requires manipulation of a Host header. Details The...

The Voynich Codex Decoded: Statistical Symbolism and Scroll-Wide Logic

This paper introduces a structured decoding framework for the Voynich Manuscript, based on mathematical rhythm, symbolic transformation, and glyph-level recursion. Rather than interpret symbols phonetically, this method decodes them by structural roles and spatial pacing. Using scroll-wide...

WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Lam Que Chi Patchstack Alliance in WordPress Plugin WP Mailster versions = 1.8.16.0...

CVE-2024-46785

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use listdelrcu for SRCU protected list variable Chi Zhiling reported: We found a null pointer accessing in tracefs1, the reason is that the variable 'eichild' is set to LISTPOISON1, that means the list was removed in...

CVE-2024-46785

CVE-2024-46785 affects the Linux kernel, specifically an issue in eventfs relating to SRCU-protected lists. The root cause is a NULL pointer access in tracefs when ei_child can be set to LIST_POISON1 after removal in eventfs_remove_rec, leading to a crash/panic. The vulnerability materializes whe...

VulnCheck KEV: CVE-2021-31250

Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...