71 matches found
Malicious code in @citi-gcg-167407/web-common (npm)
The package @citi-gcg-167407/web-common was found to contain malicious code...
Malicious code in paychex-common-npm (npm)
The package paychex-common-npm was found to contain malicious code...
MAL-2025-7045 Malicious code in @adzu/common (npm)
The package @adzu/common was found to contain malicious code...
MAL-2025-38160 Malicious code in vbs-common (npm)
The package vbs-common was found to contain malicious code...
MAL-2025-7125 Malicious code in @citi-gcg-167407/web-common (npm)
The package @citi-gcg-167407/web-common was found to contain malicious code...
Fedora: Security Advisory (FEDORA-2025-908dfe95f6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2025-3540 Malicious code in webview-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ar2-common (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2476bf9e09f2fab60aa1b305f5cedcd81dc097e566a795a082e951ebf6c620ef Any computer that has this package installed or running should be considered...
MAL-2025-1020 Malicious code in ar2-common (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2476bf9e09f2fab60aa1b305f5cedcd81dc097e566a795a082e951ebf6c620ef Any computer that has this package installed or running should be considered...
Malicious code in @electra-web/common (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3
CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3. A patched version of the package is available...
MAL-2024-10796 Malicious code in seller-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a60e43622156734ed64b698b46f6115dd23fb593fd5b9da41b6a8fd50faebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bitkub-moonshot/common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sbbol/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8647d6775a176599c8fd0a0c637e5402a47603deac3f4534d421bece0ee8fe36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rush-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abea11add02528a325325fccf4a8e830e9b44fa80944ec8fed905deffb0a0ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-32631
Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authenticati...
CVE-2021-32631
Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authenticati...
Authentication flaw
Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authenticati...
CVE-2021-32631
CVE-2021-32631 affects the NIMBLE Common package. Before commit 3b96cb0293d3443b870351945f41d7d55cb34b53, it did not properly verify JWT signatures, enabling forging of valid JWTs and potential authentication bypasses. A patch was introduced in that commit; as a workaround, the parseClaimsJws met...
CVE-2021-32631 JSON Web Tokens not properly verified
Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authenticati...