CVE-2026-33431 Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the POST /config//show API endpoint accepts a configver parameter that is directly appended to a base directory path to construct a local file path, which is subsequently opened and it...

MAL-2025-34253 Malicious code in svg-config-viewer (npm)

The package svg-config-viewer was found to contain malicious code...

Malicious code in svg-config-viewer (npm)

The package svg-config-viewer was found to contain malicious code...