MAL-2025-19030 Malicious code in dynamic-form-components (npm)

The package dynamic-form-components was found to contain malicious code...

MAL-2025-8369 Malicious code in @leaffm/components (npm)

The package @leaffm/components was found to contain malicious code...

MAL-2025-21482 Malicious code in github-react-components (npm)

The package github-react-components was found to contain malicious code...

MAL-2025-32927 Malicious code in sema-ui-components (npm)

The package sema-ui-components was found to contain malicious code...

MAL-2025-15301 Malicious code in babel-preset-animoto-components (npm)

The package babel-preset-animoto-components was found to contain malicious code...

MAL-2025-13933 Malicious code in a12l-components (npm)

The package a12l-components was found to contain malicious code...

MAL-2025-31832 Malicious code in react-natvie-components (npm)

The package react-natvie-components was found to contain malicious code...

MAL-2025-9590 Malicious code in @uxbrand-components/illustration-widget (npm)

The package @uxbrand-components/illustration-widget was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-40087 Malicious code in yabs-react-components (npm)

The package yabs-react-components was found to contain malicious code...

MAL-2025-7743 Malicious code in @csid-na/imc3-components (npm)

The package @csid-na/imc3-components was found to contain malicious code...

MAL-2025-7108 Malicious code in @azl-react-components/svgs (npm)

The package @azl-react-components/svgs was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2023-5342

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

CVE-2023-5342

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection due to the unsafe implementation of a dynamic Function constructor. An attacker can execute arbitrary JavaScript code on the server by sending a crafted POST request...

@proompter/demo-next (>=0.0.16, <=0.0.19), @proompter/flowise (>=1.4.13, <=1.4.14) +2 more potentially affected by CVE-2025-8943 via flowise-components (>=1.3.4, <=3.1.4)

flowise-components NPM version =1.3.4, =0.0.16, =1.4.13, =0.0.1, =1.0.0, =3.1.4 Source cves: CVE-2025-8943 Source advisory: SNYK:JS-FLOWISECOMPONENTS-11953677...

Command Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Command Injection via the CustomMCP class. An attacker can gain unauthorized remote access and execute arbitrary operating system commands by sending crafted requests over the network. This i...

PT-2025-33478 · Fedora · Shim

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired, potentially allowing the loading of old or invalid signed boot components...

Security Bulletin: Multiple vulnerabilities in IBM Controller

Summary There are vulnerabilities in Open-Source Software OSS components used by IBM Controller. This Security Bulletin relates only to the direct usage of third-party components by IBM Controller and not any nested dependencies within the product. Vulnerability Details CVEID:CVE-2015-6420...

PT-2025-32984

Name of the Vulnerable Software and Affected Versions AMPHP affected versions not specified Apache Tomcat affected versions not specified Eclipse Foundation affected versions not specified F5 affected versions not specified Fastly affected versions not specified gRPC affected versions not specifi...

Siemens Third-Party Components in SINEC OS

SUMMARY SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...