EUVD-2022-2867

Malicious code in bioql PyPI...

SUSE CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

node-connect before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370 Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the meth...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +1653 more potentially affected by CVE-2013-7370 via connect (>=2.0.0, <=2.8.0)

connect NPM version =2.0.0, =0.0.1, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.3, =0.0.5, =1.0.39 and more Source cves: CVE-2013-7370 Source advisory: OSV:GHSA-3FW8-66WF-PR7M...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +1653 more potentially affected by CVE-2013-7370 via connect (>=2.0.0, <=2.8.0)

connect NPM version =2.0.0, =0.0.1, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.3, =0.0.5, =1.0.39 and more Source cves: CVE-2013-7370 Source advisory: GHSA-3FW8-66WF-PR7M...

Cross site scripting

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +2569 more potentially affected by CVE-2013-7370 via connect (>=0.2.4, <=2.8.0)

connect NPM version =0.2.4, =0.0.1, =1.0.0-alpha.27, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.2 - @beisen-cmps/italent-feed-8 1.0.0 and more Source cves: CVE-2013-7370 Source advisory: MEND:CVE-2013-7370...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...