postgraas-server vulnerable to SQL injection

A vulnerability, which was classified as critical, was found in Blue Yonder postgraasserver up to 2.0.0b2. Affected is the function createpgconnection/createpostgresdb of the file postgraasserver/backends/postgrescluster/postgresclusterdriver.py of the component PostgreSQL Backend Handler. The...

Malicious code in ui-cluster-driver-otccce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview ui-cluster-driver-otccce is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-200192

Malicious code in ui-cluster-driver-otccce npm...

MAL-2025-191555 Malicious code in ui-cluster-driver-otccce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...

Malware in ui-cluster-driver-sks

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3923 Malicious code in ui-cluster-driver-sks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df8e83da746ac6e7cd3a4ea82d15ef6dc513b4f6be89b8c2bb9668fc80efe38 Any computer that has this package installed or running should be considered...

Malicious code in ui-cluster-driver-sks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df8e83da746ac6e7cd3a4ea82d15ef6dc513b4f6be89b8c2bb9668fc80efe38 Any computer that has this package installed or running should be considered...

CVE-2024-22036

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

Malicious code in ui-cluster-driver-civo (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-G6W6-H933-4RC5 Soketi was exposed to Sandbox Escape vulnerability via vm2

Impact What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver or through PM2. Patches Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi. Workarounds Is there a way for users to fix or remedia...

Soketi was exposed to Sandbox Escape vulnerability via vm2

Impact What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver or through PM2. Patches Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi. Workarounds Is there a way for users to fix or remedia...

PT-2023-33017

Name of the Vulnerable Software and Affected Versions Soketi affected versions not specified Description The issue impacts anyone who used Soketi with the cluster driver or through PM2. Recommendations Upgrade to the latest version of Soketi...