Lucene search
+L

8 matches found

osv_mal
osv_mal
•added 2025/08/28 7:23 a.m.•12 views

MAL-2025-41537 Malicious code in botframework-webchat-cldr-data (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 7:23 a.m.•15 views

Malicious code in botframework-webchat-cldr-data (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/10/10 5:43 a.m.•5 views

Malware in botframework-webchat-cldr-data-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/07 5:38 p.m.•14 views

Malicious code in botframework-webchat-cldr-data-downloader (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069cec738fcd016cead066052e66581ac130f721c6454d3079b1d054381031e8 Any computer that has this package installed or running...

6.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/10/07 5:38 p.m.•14 views

MAL-2024-9217 Malicious code in botframework-webchat-cldr-data-downloader (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069cec738fcd016cead066052e66581ac130f721c6454d3079b1d054381031e8 Any computer that has this package installed or running...

7AI score
SaveExploits0References1
Oracle linux
Oracle linux
•added 2022/10/21 12:00 a.m.•65 views

java-17-openjdk security and bug fix update

1:17.0.5.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Related: rhbz2133695...

5.3CVSS1.4AI score0.03328EPSS
SaveExploits0
Oracle linux
Oracle linux
•added 2022/10/21 12:00 a.m.•64 views

java-11-openjdk security and bug fix update

1:11.0.17.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Related: rhbz2133695...

5.3CVSS1.2AI score0.03328EPSS
SaveExploits0
Oracle linux
Oracle linux
•added 2022/10/21 12:00 a.m.•63 views

java-11-openjdk security and bug fix update

11.0.17.0.8-2.0.1 - Replace upstream references Orabug: 34340155 1:11.0.17.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public A...

5.3CVSS1.2AI score0.03328EPSS
SaveExploits0
Rows per page
Query Builder