GHSA-V3Q9-HJ7J-63HQ vulnerabilities

Vulnerabilities for packages: airflow-core...

MGASA-2023-0104 Updated woodstox-core packages fix security vulnerability

Denial of service using crafted input. CVE-2022-40152...

Information Disclosure

microsoft.aspnetcore.app is vulnerable to information disclosure. The vulnerability exists in some of the .NET Core packages which allows an attacker to gain access to privileged information...

Node.js third-party modules: npm packages that overlap with core node packages

Hi, I have posted here, but I wanted to make you aware of this easy social engineering trick. I do not want to claim any of these are currently malicious, but it they easily could be. Thanks, Marc Impact The attacker could do anything...use the postinstall as the user, work the same as steal data...