Lucene search
+L

255 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in ophiuchus-phoenix-rimraf-convict (npm)

The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-32153 Malicious code in rest-cosmos-convict-jupiter (npm)

The package rest-cosmos-convict-jupiter was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17529 Malicious code in convict-centaurus-cosmology-odin (npm)

The package convict-centaurus-cosmology-odin was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17527 Malicious code in convict-astrometry-got-multiverse (npm)

The package convict-astrometry-got-multiverse was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-23251 Malicious code in install-zenobia-convict-backend (npm)

The package install-zenobia-convict-backend was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17530 Malicious code in convict-indus-loopback-ariel (npm)

The package convict-indus-loopback-ariel was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-17593 Malicious code in cors-convict-xml-paleoclimatology (npm)

The package cors-convict-xml-paleoclimatology was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-26578 Malicious code in mocha-sedna-server-convict (npm)

The package mocha-sedna-server-convict was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-28354 Malicious code in ophiuchus-phoenix-rimraf-convict (npm)

The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17528 Malicious code in convict-borealis-socketio-kardashevscale (npm)

The package convict-borealis-socketio-kardashevscale was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-19448 Malicious code in electron-charon-convict-meissa (npm)

The package electron-charon-convict-meissa was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-29148 Malicious code in phoenix-xanadu-convict-nightmare (npm)

The package phoenix-xanadu-convict-nightmare was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.7 views

MAL-2025-24133 Malicious code in jwt-convict-dependencies-resolvers (npm)

The package jwt-convict-dependencies-resolvers was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-15822 Malicious code in blitz-stream-convict-webdriverio (npm)

The package blitz-stream-convict-webdriverio was found to contain malicious code...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:0 a.m.7 views

The vulnerability of Mozilla Convict’s library involves uncontrolled changes to object prototype attributes, allowing attackers to execute arbitrary code.

The vulnerability of the Mozilla Convict library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.4CVSS5.8AI score0.00275EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/11/26 12:15 p.m.28 views

CVE-2023-0163

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

8.4CVSS0.00275EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/26 11:36 a.m.13 views

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

7.1AI score0.00275EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/26 11:36 a.m.34 views

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

0.00275EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/26 11:36 a.m.6 views

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

8.4CVSS7.2AI score0.00275EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/01/30 12:0 a.m.8 views

convict 安全漏洞

convict is a featured configuration management library for Node.js. A security vulnerability exists in convict, which stems from improperly controlled modifications to object prototype attributes...

8.4CVSS5.5AI score0.00275EPSS
SaveExploits1References2
Rows per page
Query Builder