Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6481 Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

com.github.alexmojaki:s3-stream-upload (1.0), com.hotels:circus-train-common-test (10.0.0) +1 more potentially affected by CVE-2025-24961 via org.gaul:s3proxy (>=1.4.0, <=1.6.1)

org.gaul:s3proxy MAVEN version =1.4.0, =0.9.0-preview1, =0.9.0-preview2 Source cves: CVE-2025-24961 Source advisory: MEND:CVE-2025-24961...

com.hotels:circus-train-common-test (10.0.0) potentially affected by CVE-2025-24961 via org.gaul:s3proxy (1.5.3)

org.gaul:s3proxy MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.gaul:s3proxy and may be impacted: - com.hotels:circus-train-common-test 10.0.0 Source cves: CVE-2025-24961 Source advisory: OSV:GHSA-2CCP-VQMV-4R4X...

MAL-2025-646 Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

Malicious code in eg-affiliates-common-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2285 Malicious code in eg-affiliates-common-test (npm)

--- -= Per source details. Do not edit below this line.=-...

org.wildfly.security.elytron-web:undertow-common-test (1.9.0.final), org.wildfly.security:wildfly-elytron (1.15.0.final) +1 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security.elytron-web:undertow-common-test...

org.wildfly.security.elytron-web:undertow-common-test (1.6.0.cr1), org.wildfly.security:wildfly-elytron (1.10.0.cr1) +1 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security.elytron-web:undertow-common-test...

org.wildfly.security.elytron-web:undertow-common-test (1.6.1.final), org.wildfly.security:wildfly-elytron (1.10.5.final) +1 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.5.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security.elytron-web:undertow-common-test...

com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2016-5001 via org.apache.hadoop:hadoop-common (0.22.0)

org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...